Linux Distros Unpatched Vulnerability : CVE-2022-49046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: dev: check return value when calling devsetname If devsetname fails, the devname is null, check the return value of devsetname to avoid the null-ptr-deref...

Linux Distros Unpatched Vulnerability : CVE-2024-44987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: prevent UAF in ip6sendskb syzbot reported an UAF in ip6sendskb 1 After ip6localout has returned, we no longer can safely dereference rt, unless we hold...

Linux Distros Unpatched Vulnerability : CVE-2023-52869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: pstore/platform: Add check for kstrdup Add check for the return value of kstrdup and return...

Linux Distros Unpatched Vulnerability : CVE-2022-48755

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 Johan reported the below crash with testbpf on ppc64 e5500: testbpf: 296 ALUENDFROMLE 64:...

Linux Distros Unpatched Vulnerability : CVE-2024-46773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Check denominator pbndiv before used WHAT & HOW A denominator cannot be 0, and is checked before used. This fixes 1 DIVIDEBYZERO issue reported...

Linux Distros Unpatched Vulnerability : CVE-2023-52640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: Fix oob in ntfslistxattr The length of name cannot exceed the space occupied by ea. CVE-2023-52640 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2022-47518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in...

Linux Distros Unpatched Vulnerability : CVE-2024-46676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if...

Linux Distros Unpatched Vulnerability : CVE-2021-46988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: userfaultfd: release page in error path to avoid BUGON Consider the following sequence of...

Linux Distros Unpatched Vulnerability : CVE-2022-49586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: Fix data-races around sysctltcpfastopen. While reading sysctltcpfastopen, it can be changed concurrently. Thus, we need to add READONCE to its readers...

Linux Distros Unpatched Vulnerability : CVE-2024-26733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arp: Prevent overflow in arpreqget. syzkaller reported an overflown write in arpreqget. 0 When ioctlSIOCGARP is issued, arpreqget looks up an neighbour entry an...

Linux Distros Unpatched Vulnerability : CVE-2021-46923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that finishmountkattr is called after...

Linux Distros Unpatched Vulnerability : CVE-2024-26671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-mq: fix IO hang from sbitmap wakeup race In blkmqmarktagwait, addwaitqueue may be re- ordered with the following blkmqgetdrivertag in case of getting driver...

Linux Distros Unpatched Vulnerability : CVE-2022-49123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ath11k: Fix frames flush failure caused by deadlock We are seeing below warnings: kernel: 25393.301506 ath11kpci 0000:01:00.0: failed to flush mgmt transmit que...

Linux Distros Unpatched Vulnerability : CVE-2021-47113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: abort in renameexchange if we fail to insert the second ref Error injection stress uncovered a problem where we'd leave a dangling inode ref if we failed...

Linux Distros Unpatched Vulnerability : CVE-2021-46918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: clear MSIX permission entry on shutdown Add disabling/clearing of MSIX...

Linux Distros Unpatched Vulnerability : CVE-2022-48758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: bnx2fc: Flush destroywork queue before calling bnx2fcinterfaceput The bnx2fcdestroy functions are removing the interface before calling destroywork. This...

Linux Distros Unpatched Vulnerability : CVE-2023-52612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req-dst buffer overflow The req-dst buffer size should be checked before...

Linux Distros Unpatched Vulnerability : CVE-2024-35832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bcachefs: kvfree bchfs::snapshots in bch2fssnapshotsexit bchfs::snapshots is allocated by kvzalloc in snapshottmut. It should be freed by kvfree not kfree. Or...

Linux Distros Unpatched Vulnerability : CVE-2023-52770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: split initial and dynamic conditions for extentcache Let's allocate the extentcache tree without dynamic conditions to avoid a missing condition causing a...