Important: kernel-livepatch-5.10.147-133.644

Issue Overview: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6renewoptions of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a...

USN-5815-1 linux-bluefield vulnerabilities

It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-20421 David Leadbeater...

GSD-2023-1001568 nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()

nilfs2: fix shift-out-of-bounds/overflow in nilfssb2badoffset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001351 nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()

nilfs2: fix shift-out-of-bounds/overflow in nilfssb2badoffset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001350 nilfs2: fix shift-out-of-bounds due to too large exponent of block size

nilfs2: fix shift-out-of-bounds due to too large exponent of block size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001027 nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()

nilfs2: fix shift-out-of-bounds/overflow in nilfssb2badoffset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001026 nilfs2: fix shift-out-of-bounds due to too large exponent of block size

nilfs2: fix shift-out-of-bounds due to too large exponent of block size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000601 nilfs2: fix shift-out-of-bounds due to too large exponent of block size

nilfs2: fix shift-out-of-bounds due to too large exponent of block size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000364 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()

nilfs2: fix NULL pointer dereference in nilfspalloccommitfreeentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.301 by commit...

GSD-2023-1000334 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()

nilfs2: fix NULL pointer dereference in nilfspalloccommitfreeentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.268 by commit...

GSD-2023-1000298 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()

nilfs2: fix NULL pointer dereference in nilfspalloccommitfreeentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.226 by commit...

GSD-2023-1000239 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()

nilfs2: fix NULL pointer dereference in nilfspalloccommitfreeentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.158 by commit...

GSD-2023-1000169 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()

nilfs2: fix NULL pointer dereference in nilfspalloccommitfreeentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2023-1000075 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()

nilfs2: fix NULL pointer dereference in nilfspalloccommitfreeentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

PT-2024-11870 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc2-syzkaller-00105-gb229b6ca5abb Description: A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the nilfs2 file system. This issue occurs when the DAT metadata file...

PT-2023-9426 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the nilfs2 component of the Linux kernel. It occurs when nilfs2 reads a corrupted disk image and attempts to read a b-tree node block using an invalid...

USN-5793-3: Linux kernel vulnerabilities

It was discovered that the iouring subsystem in the Linux kernel did not properly perform reference counting in some situations, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-3910 ...

USN-5791-3 linux-azure-5.4, linux-azure-fde vulnerabilities

It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-20421 David Leadbeater...

USN-5792-2: Linux kernel vulnerabilities

Mingwei Zhang discovered that the KVM implementation for AMD processors in the Linux kernel did not properly handle cache coherency with Secure Encrypted Virtualization SEV. A local attacker could possibly use this to cause a denial of service host system crash. CVE-2022-0171 It was discovered th...

Ubuntu 22.10 : Linux kernel vulnerabilities (USN-5793-1)

The remote Ubuntu 22.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5793-1 advisory. It was discovered that the iouring subsystem in the Linux kernel did not properly perform reference counting in some situations, leading to a use- after-free...