UVI-2021-1000572 NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()

NFSv4: Fix a NULL pointer dereference in pnfsmarkmatchinglsegsreturn This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

OPENSUSE-SU-2021:0691-1 Security update for vlc

This update for vlc fixes the following issues: Update to version 3.0.13: + Demux: - Adaptive: fix artefacts in HLS streams with wrong profiles/levels - Fix regression on some MP4 files for the audio track - Fix MPGA and ADTS probing in TS files - Fix Flac inside AVI files - Fix VP9/Webm artefact...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

ALSA-2021:0558 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: locking issue in drivers/tty/ttyjobctrl.c can lead to an use-after-free CVE-2020-29661 kernel: performance counters race condition use-after-free CVE-2020-14351 kernel: ICMP rate limiting...

Important: kernel

Issue Overview: An issue in the HID driver in the Linux kernel may lead to invalid memory access. CVE-2022-20565 In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in...

Debian DLA-2385-1 : linux-4.19 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, or information leak. CVE-2019-3874 Kernel buffers allocated by the SCTP network protocol were not limited by the memory cgroup controller. A local user could potentially us...

CVE-2020-25212

A flaw was found in the NFSv4 implementation where when mounting a remote attacker controlled server it could return specially crafted response allow for local memory corruption and possibly privilege escalation. Mitigation While there is no known mitigation to this flaw, configuring authenticati...

sysutils/openzfs-kmod -- critical permissions issues

Andrew Walker reports: Issue 1: Users are always granted permissions to cd into a directory. The check for whether execute is present on directories is a de-facto no-op. This cannot be mitigated without upgrading. Even setting an explicit "deny - execute" NFSv4 ACE will be bypassed. Issue 2: All...

Unbreakable Enterprise kernel security update

5.4.17-2011.3.2.1uek - x86/speculation: Add Ivy Bridge to affected list Josh Poimboeuf Orabug: 31352779 CVE-2020-0543 - x86/speculation: Add SRBDS vulnerability and mitigation documentation Mark Gross Orabug: 31352779 CVE-2020-0543 - x86/speculation: Add Special Register Buffer Data Sampling SRBD...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the Linux kernel's encodeshareaccess implementation. A local, unprivileged user could use this flaw to trigger a denial of service by creating a regular file on an NFSv4 Network File System version 4 file system via mknod...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists through inconsistency in the methods for allocating and freeing NFSv4 ACL data; CVE-2010-4250 fix caused a regression; a flaw in nextpidmap and inetdiagbcaudit; flaws in the CAN implementation; a race condition in the memory...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. Inconsistency in the methods for allocating and freeing NFSv4 ACL data and the way mapping expansions were handled could allow a local, unprivileged user to cause a denial of service...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. An inconsistency was found in the interaction between the Linux kernel's method for allocating NFSv4 Network File System version 4 ACL data and the method by which it was freed. This inconsistency led to a kernel panic which could be triggered by a local...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference flaw in the NFSv4 implementation. Several NFSv4 file locking functions failed to check whether a file had been opened on the server before performing locking operations on it...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in the NFSv4 implementation. The kernel would do an unnecessary permission check after creating a file. This check would usually fail and leave the file with the permission bits set to random values...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the Linux kernel Network File System daemon nfsd when NFSv4 was enabled. Remote attackers could use this to cause a denial of service via a buffer overflow...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as the NFSv4 client was missing a file permission check for the execute bit in some situations. This could allow local, unprivileged users to run non-executable files on NFSv4 mounted file systems...

Kernel update: Virtuozzo ReadyKernel patch 102.0 for Virtuozzo 7.0 and Virtuozzo Infrastructure Platform 2.5, 3.0, 3.5

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the kernels 3.10.0-862.11.6.vz7.64.7 Virtuozzo 7.0.8 HF1, 3.10.0-862.20.2.vz7.73.24 Virtuozzo 7.0.9 and Virtuozzo Infrastructure Platform 2.5, 3.10.0-862.20.2.vz7.73.29 Virtuozzo 7.0.9 and Virtuozzo...

kernel security and bug fix update

3.10.0-1062.4.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 3.10.0-1062.4.1 - vhost vhost: make sure lognum innum Eugenio Perez 1750879 1750880...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0046)

The remote OracleVM system is missing necessary patches to address critical security updates : - NFSv4: Don't try to reclaim unused state owners Trond Myklebust - x86/microcode: Update late microcode in parallel Ashok Raj Orabug: 30302412 - floppy: fix out-of-bounds read in copybuffer Denis Efrem...