Unbreakable Enterprise kernel security update

5.4.17-2136.344.4.1 - certs: Reference revocation list for all keyrings Eric Snowberg Orabug: 38052126 5.4.17-2136.344.4 - certs: Add new Oracle Linux Driver Signing key 1 certificate Sherry Yang Orabug: 37967555 5.4.17-2136.344.3 - net/mlx5e: Don't call cleanup on profile rollback failure Cosmin...

CLSA-2025-1749480611 kernel: Fix of 25 CVEs

rcu-tasks: Fix showrcutaskstracegpkthread buffer overflow CVE-2024-38577 - tcp: fix mptcp DSS corruption due to large pmtu xmit CVE-2024-50083 - vsock: Keep the binding until socket destruction CVE-2025-21756 - memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove CVE-2025-22020 -...

CVE-2022-33908

DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdHostDriver driver could cause SMRAM...

SUSE SLES15 Security Update : kernel RT (Live Patch 0 for SLE 15 SP6) (SUSE-SU-2025:01601-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01601-1 advisory. This update for the Linux Kernel 6.4.0-1506008 fixes several issues. The following security issues were fixed: - CVE-2024-53042: ipv4: iptunne...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

USN-7401-1 linux-aws-5.4 vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56720)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56720 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56720)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56720 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to...

Important: kernel

Issue Overview: A flaw was found in hw. Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type, potentially leading to information disclosure. CVE-2022-23825 Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may...

Linux Distros Unpatched Vulnerability : CVE-2024-56752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gr/gf100: Fix missing unlock in gf100grchannew When the call to gf100grctxgenera...

Linux Distros Unpatched Vulnerability : CVE-2024-35958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix incorrect descriptor free behavior ENA has two types of TX queues: - queues...

Linux Distros Unpatched Vulnerability : CVE-2024-36026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11 While doing multiple S4 stress tests, GC/RLC/PMFW get into an invalid state resulting into hard hangs...

CVE-2021-47640

CVE-2021-47640 describes a Linux kernel vulnerability in the powerpc/KASAN pathway where the shadow page table was not updated correctly when PTE_RPN_SHIFT = 24 and PAGE_SHIFT = 12. The issue caused false positives and false negatives in KASAN reports (vmalloc-out-of-bounds in pcpu_alloc) and was...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46756)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46756 advisory. - 2024-10-24: CVE-2024-46828 was added to this advisory. 2024-10-24: CVE-2024-46840 was added to this advisory...

CLSA-2025-1738663576 kernel: Fix of 11 CVEs

ELF: fix kernel.randomizevaspace double read CVE-2024-46826 - smb: client: fix UAF in async decryption CVE-2024-50047 - SMB3: Resolve data corruption of TCP server info fields CVE-2024-50047 - smb3: add defines for new crypto algorithms CVE-2024-50047 - net: do not delay dstentriesadd in...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfcworkerwakeup bsc1225820. CVE-2024-27397: netfilter: nftables: use timestamp to check for set eleme...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47723)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47723 advisory. - In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG and...

USN-7088-3 linux-aws-5.4, linux-oracle-5.4 vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Several security issues were discovered in the Linux kernel. An attacker could...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2024-072 (ALASKERNEL-5.10-2024-072)

The version of kernel installed on the remote host is prior to 5.10.227-219.884. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-072 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: inetdefrag: prevent sk release...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-744)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-744 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Silence a warning in btftypeidsize CVE-2023-54247 In the Linux kernel, the following vulnerability has been resolved:...