GSD-2022-1006417 nvme-tcp: fix UAF when detecting digest errors

nvme-tcp: fix UAF when detecting digest errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.213 by commit...

GSD-2022-1006399 nvme-tcp: fix UAF when detecting digest errors

nvme-tcp: fix UAF when detecting digest errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.143 by commit...

GSD-2022-1006371 nvme-tcp: fix UAF when detecting digest errors

nvme-tcp: fix UAF when detecting digest errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...

PT-2022-34628 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.0 through v5.15.67 Description: The issue is related to a use-after-free UAF error when detecting digest errors in nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2022-34656 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.0 through v5.10.142 Description: The issue is related to a use-after-free UAF error when detecting digest errors in nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34593 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.0 through v5.19.8 Description: The issue is related to a use-after-free UAF error when detecting digest errors in nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-34674 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.213 Description: The issue is related to a use-after-free UAF error when detecting digest errors in nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

ALSA-2022:6610 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: heap overflow in nftseteleminit CVE-2022-34918 kernel: vulnerability of buffer overflow in nftsetdescconcatparse CVE-2022-2078 For more details about the security issues, including the...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: heap overflow in nftseteleminit CVE-2022-34918 kernel: vulnerability of buffer overflow in nftsetdescconcatparse CVE-2022-2078 For more details about the security issues, including the...

PT-2022-7379

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free UAF vulnerability in the nvme-tcp module of the Linux kernel. This vulnerability can be exploited to impact the confidentiality, integrity, and...

GSD-2022-1000395 nvme-tcp: fix possible use-after-free in transport error_recovery work

nvme-tcp: fix possible use-after-free in transport errorrecovery work This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by commit...

PT-2022-28815

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-28669

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28731

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-28625

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.181 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-7646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a possible use-after-free in the transport error recovery work of the nvme-tcp module. This occurs when nvme tcp submit async event work checks the control and...

UVI-2021-1002202 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002202 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002133 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...