PT-2022-33811

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.61 Description The issue concerns invalid memory access via the node onlineNUMA NO NODE function. It was introduced in version v2.6.33 and fixed in version v5.15.61. The actual impact and attack plausibilit...

Important: Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update

Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Moderate: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11 low-latency extras update

Red Hat OpenShift Container Platform low-latency extras release 4.11, which provides an update for cnf-tests-container, dpdk-base-container and performance-addon-operator-must-gather-rhel8-container is now available. Secondary scheduler builds and numaresources-operator are also available for...

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2022-0014)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-free in shownumastats because NU...

GSD-2022-1000532 mm: don't try to NUMA-migrate COW pages that have other uses

mm: don't try to NUMA-migrate COW pages that have other uses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...

GSD-2022-1000385 mm: don't try to NUMA-migrate COW pages that have other uses

mm: don't try to NUMA-migrate COW pages that have other uses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by commit...

PT-2022-28806

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue concerns the handling of Copy-on-Write COW pages in the Linux Kernel, specifically the attempt to NUMA-migrate such pages that have other uses. The actual impact and attack...

PT-2022-28721

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue concerns the handling of Copy-on-Write COW pages in the Linux Kernel, specifically regarding NUMA migration. It has been noted that attempting to NUMA-migrate COW pages with other...

PT-2022-28659

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue concerns the handling of Copy-on-Write COW pages in the Linux Kernel, specifically regarding NUMA migration. The problem arises when the kernel attempts to migrate COW pages that...

PT-2024-10493

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's memory management, specifically with the NUMA balancing feature. Enabling NUMA balancing can cause corruption when used with certain test loads...

PT-2021-30569

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue concerns the mbind function in the Linux Kernel, where illegal combinations of MPOL F NUMA BALANCING and MPOL LOCAL policies are not properly handled. This could potentially lead to...

PT-2021-26574

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue concerns a problem in the mm/mempolicy component where illegal combinations of MPOL F NUMA BALANCING and MPOL LOCAL in the mbind function are not properly handled. This is an...

Denial Of Service

Linux kernel is vulnerable to denial of service. Linux fair scheduler has a use-after-free in shownumastats because NUMA fault statistics are inappropriately freed. A flaw was found in the Linux kernels implementation of displaying NUMA statistics, where displaying the scheduler statistics could...

Oracle Linux 7 : kernel (ELSA-2021-2725)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2725 advisory. - media: xirlinkcit: add missing descriptor sanity checks Mark Langsdorf 1826877 CVE-2020-11668 - Bluetooth: verify AMP hcichan before ampdestroy Gopal...

kernel: use-after-free in show_numa_stats function

A flaw was found in the Linux kernel’s implementation of displaying NUMA statistics, where displaying the scheduler statistics could trigger a use-after-free in shownumastats and display the kernel memory to userspace. The highest threat from this vulnerability is to system availability...

Updated kernel packages fix security issues and possible filesystem corruption

This kernel update is based on upstream 5.10.20 and fixes at least the following security issues: A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRMIOCTLNOUVEAUCHANNELALLOC. This flaw...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0098-1)

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-20669: Fixed an improper check i915gemexecbuffer2ioctl in drivers/gpu/drm/i915/i915gemexecbuffer.c bsc1122971. CVE-2019-20934: Fixed a use-after-fr...

CVE-2019-20934

A flaw was found in the Linux kernel’s implementation of displaying NUMA statistics, where displaying the scheduler statistics could trigger a use-after-free in shownumastats and display the kernel memory to userspace. The highest threat from this vulnerability is to system availability. Mitigati...

Linux kernel post-release reuse vulnerability (CNVD-2021-13673)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A use-after-free vulnerability exists in versions of Linux kernel prior to 5.2.6, which stems from the fact that on NUMA systems, the Linux fair scheduler has a use-after-free ...

CVE-2019-20934

An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-free in shownumastats because NUMA fault statistics are inappropriately freed, aka CID-16d51a590a8c...