RHEL 9 : kernel (RHSA-2024:4533)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4533 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: TIPC message reassembly...

RHEL 8 : kpatch-patch-4_18_0-372_91_1 (RHSA-2024:4547)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4547 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module i...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

Linux Kernel TIPC Message Reassembly Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with TIPC bearer enabled are vulnerable. The specific flaw exists within the processing of fragmented TIPC...

GSD-2021-1000674 tipc: skb_linearize the head skb when reassembling msgs

tipc: skblinearize the head skb when reassembling msgs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.235 by commit...

UVI-2021-1000674 tipc: skb_linearize the head skb when reassembling msgs

tipc: skblinearize the head skb when reassembling msgs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.235 by commit...

UVI-2021-1000597 tipc: skb_linearize the head skb when reassembling msgs

tipc: skblinearize the head skb when reassembling msgs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

PT-2021-25024

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.9 Description: The issue is related to the reassembly of messages in the Linux Kernel, specifically with the skb linearize function. The actual impact and attack plausibility have not yet been proven...

PT-2021-29018

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to the reassembly of messages in the Linux Kernel, specifically with the skb linearize function. The actual impact and attack plausibility have not yet been proven...

PT-2021-29122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue is related to the reassembly of messages in the tipc protocol, specifically with the skb linearize function. The actual impact and attack plausibility have not yet been proven...

PT-2021-29096

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.124 Description The issue is related to the reassembling of messages in the Linux Kernel, specifically with the skb linearize function. The actual impact and attack plausibility have not yet been proven...

PT-2021-29139

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.235 Description The issue is related to the reassembly of messages in the Linux Kernel, specifically with the skb linearize function. The actual impact and potential for attack have not been proven yet...

PT-2021-25161

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.271 Description The issue is related to the reassembly of messages in the tipc protocol, specifically with the skb linearize function. The actual impact and attack plausibility have not yet been proven...

FreeBSD : FreeBSD -- EAP-pwd message reassembly issue with unexpected fragment (a207bbd8-6572-11e9-8e67-206a8a720317)

EAP-pwd implementation in hostapd EAP server and wpasupplicant EAP peer does not to validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to NULL pointer dereference. See...