PT-2023-33995 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the powerpc/rtas component, specifically in the rtas os term function. It has been identified as a potential security concern, although the actual impact and attack...

Warning: New RapperBot Campaign Aims to Launch DDoS Attacks at Game Servers

Cybersecurity researchers have unearthed new samples of malware called RapperBot that are being used to build a botnet capable of launching Distributed Denial of Service DDoS attacks against game servers. "In fact, it turns out that this campaign is less like RapperBot than an older campaign that...

kernel: powerpc/rtas: Keep MSR[RI] set when calling RTAS

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Keep MSRRI set when calling RTAS RTAS runs in real mode MSRDR and MSRIR unset and in 32-bit big endian mode MSRSF,LE unset. The change in MSR is done in enterrtas in a relatively complex way, since the MSR value cou...

powerpc-utils bug fix and enhancement update

An update is available for powerpc-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...

GSD-2022-1007055 powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe()

powerpc/kprobes: Fix null pointer reference in archpreparekprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006795 powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe()

powerpc/kprobes: Fix null pointer reference in archpreparekprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

powerpc-utils bug fix and enhancement update

An update is available for powerpc-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The powerpc-utils packages provide various utilities for IBM Power...

Unbreakable Enterprise kernel security update

5.15.0-2.52.3 - posix-cpu-timers: Cleanup CPU timers before freeing them during exec Thadeu Lima de Souza Cascardo Orabug: 34495548 CVE-2022-2585 - fix race between exititimers and /proc/pid/timers Oleg Nesterov Orabug: 34495548 - rds: ib: Add preemption control when using per-cpu variables Hakon...

GSD-2022-1006291 powerpc/64: Init jump labels before parse_early_param()

powerpc/64: Init jump labels before parseearlyparam This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006240 powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader

powerpc/spufs: Fix refcount leak in spufsinitisolatedloader This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006239 powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address

powerpc/cell/axonmsi: Fix refcount leak in setupmsimsgaddress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006238 powerpc/xive: Fix refcount leak in xive_get_max_prio

powerpc/xive: Fix refcount leak in xivegetmaxprio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006221 powerpc/pci: Fix get_phb_number() locking

powerpc/pci: Fix getphbnumber locking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006137 powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader

powerpc/spufs: Fix refcount leak in spufsinitisolatedloader This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006136 powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address

powerpc/cell/axonmsi: Fix refcount leak in setupmsimsgaddress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006135 powerpc/xive: Fix refcount leak in xive_get_max_prio

powerpc/xive: Fix refcount leak in xivegetmaxprio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006114 powerpc/pci: Fix get_phb_number() locking

powerpc/pci: Fix getphbnumber locking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006090 powerpc/64: Init jump labels before parse_early_param()

powerpc/64: Init jump labels before parseearlyparam This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006004 powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address

powerpc/cell/axonmsi: Fix refcount leak in setupmsimsgaddress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1006003 powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader

powerpc/spufs: Fix refcount leak in spufsinitisolatedloader This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...