711 matches found
GSD-2022-1005370 RISC-V: kexec: Fixup use of smp_processor_id() in preemptible context
RISC-V: kexec: Fixup use of smpprocessorid in preemptible context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...
PT-2022-33334
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.4 Description The issue is related to the RISC-V architecture in the Linux Kernel. It involves the crash kexec function. The actual impact and potential for attack have not been proven yet. Recommendations...
PT-2022-33628
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.2 Description The issue is related to the use of smp processor id in a preemptible context in the kexec functionality of the RISC-V architecture. The actual impact and attack plausibility have not yet been...
Amazon Linux 2 : kernel (ALASKERNEL-5.15-2022-006)
The version of kernel installed on the remote host is prior to 5.15.57-29.131. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2022-006 advisory. A flaw was found in hw. Mis-trained branch predictions for return instructions may allow arbitrary...
Malicious Package
Overview node-kexec is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
Important: kernel
Issue Overview: An out-of-bounds write flaw was found in the Linux kernels framebuffer-based console driver functionality in the way a user triggers ioctl FBIOPUTVSCREENINFO with malicious data. This flaw allows a local user to crash or potentially escalate their privileges on the system...
SUSE: Security Advisory (SUSE-SU-2022:2803-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OESA-2022-1825 kexec-tools security update
kexec-tools provides /sbin/kexec binary that facilitates a new kernel to boot using the kernel's kexec feature either on a normal or a panic reboot. This package contains the /sbin/kexec binary and ancillary utilities that together form the userspace component of the kernel's kexec feature...
SUSE: Security Advisory (SUSE-SU-2022:2722-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GSD-2022-1004690 lockdown: Fix kexec lockdown bypass with ima policy
lockdown: Fix kexec lockdown bypass with ima policy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.208 by commit...
GSD-2022-1004145 lockdown: Fix kexec lockdown bypass with ima policy
lockdown: Fix kexec lockdown bypass with ima policy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
PT-2022-32952
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description A potential security issue exists due to a kexec lockdown bypass with ima policy. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-32407
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description A potential security issue exists due to a kexec lockdown bypass with ima policy. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-32810
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description A potential security issue exists due to a kexec lockdown bypass with ima policy. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-32629
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description A potential security issue exists due to a kexec lockdown bypass with ima policy. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
UBUNTU-CVE-2022-21505
In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...
Unbreakable Enterprise kernel-container security update
5.15.0-0.30.20.1 - lockdown: Fix kexec lockdown bypass with ima policy Eric Snowberg Orabug: 34386636 CVE-2022-21505...
Unbreakable Enterprise kernel security update
5.15.0-0.30.20.1 - lockdown: Fix kexec lockdown bypass with ima policy Eric Snowberg Orabug: 34386636 CVE-2022-21505...