OpenSSL 3.2.0 < 3.2.1 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.2.1 advisory. - Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service...

CVE-2023-6129: Expected Behavior Violation

Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker can influence whether the POLY1305 MAC...

PT-2024-8368

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the update events in group function within the powerpc/imc-pmu component of the Linux kernel. This can occur because kasprintf retur...

PT-2024-8472

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the powerpc/powernv component of the Linux kernel. The function scom debug init one is vulnerable due to the lack of a null pointer check for the...

PT-2023-9662

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null-pointer dereference in the pgtable cache add function of the powerpc/mm component of the Linux kernel. The kasprintf function returns a pointer to...

PT-2023-8770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the dlpar memory remove by index function in the powerpc/pseries/memhp module of the Linux kernel. This function may access beyond the bounds of the drmem...

PT-2024-14649

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the powerpc/lib component of the Linux kernel, where some fp/vmx code in sstep.c assumes a certain maximum size for the instructions being emulated. However, the...

kernel: powerpc/imc-pmu: Fix use of mutex in IRQs disabled section

In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Fix use of mutex in IRQs disabled section Current imc-pmu code triggers a WARNING with CONFIGDEBUGATOMICSLEEP and CONFIGPROVELOCKING enabled, while running a threadimc event. Command to trigger the warning: perf...

PT-2025-41115

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1 Description The Linux kernel contains a flaw related to SRCU Sub Read Copy Update. A commit assumed that CPU 0 is always online, but this is not always the case, particularly when booting a kdump kernel...

PT-2025-43107

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc5-150500.34-default+ Description The Linux kernel had a flaw in the mm/vmemmap/devdax subsystem that could lead to a kernel crash when probing devdax devices. A commit 4917f55b4ef9 introduced optimized...

SUSE-SU-2023:4141-1 Security update for grub2

This update for grub2 fixes the following issues: Security fixes: - CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. bsc1215935 - CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. bsc1215936 Oth...

SUSE-SU-2023:4140-1 Security update for grub2

This update for grub2 fixes the following issues: Security fixes: - CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. bsc1215935 - CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. bsc1215936 Oth...

PT-2023-9485 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.55-d23900f.ppcnf-fsp2 Description: The issue is related to a problem in the ret from syscall function where the check for icache 44x need flush is done. When the flush is needed, the code jumps out-of-line t...

SUSE-SU-2023:3822-1 Security update for supportutils

This update for supportutils fixes the following issues: Security fixes: - CVE-2022-45154: Removed iSCSI passwords bsc1207598. Other Fixes: - Changes in version 3.1.26 + powerpc plugin to collect the slots and active memory bsc1210950 + A Cleartext Storage of Sensitive Information vulnerability...

SUSE-SU-2023:3803-1 Security update for supportutils

This update for supportutils fixes the following issues: Security Fixes: - CVE-2022-45154: Removed iSCSI passwords bsc1207598. Other fixes: - Changes in version 3.1.26 + powerpc plugin to collect the slots and active memory bsc1210950 + A Cleartext Storage of Sensitive Information vulnerability...

PT-2023-36613

Уязвимость функции fail iommu bus notify модуля arch/powerpc/kernel/iommu.c поддержки платформы PowerPC ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-53172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the powerpc/iommu subsystem related to the sharing of notifiers between PCI and VIO buses. The fail iommu setup function registers the fail iommu bus...

Security Bulletin: Security Vulnerabilities in GNU glibc affect IBM Cloud Pak for Data - GNU glibc (CVE-2020-1751)

Summary Security Vulnerabilities in GNU glibc affect IBM Cloud Pak for Data - GNU glibc CVE-2020-1751 Vulnerability Details CVEID:CVE-2020-1751 DESCRIPTION: GNU glibc could allow a local attacker to execute arbitrary code on the system, caused by an out-of-bounds write when handling signal...

PT-2025-40194

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc3+ Description The Linux kernel contains a flaw in the powerpc/rtas flash component related to user copy access to flash block cache objects. When hardened usercopy is enabled, utilizing the...

PT-2025-54161

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the powerpc/powernv/sriov component where a pointer dereference occurs before a null check on the iov pointer. This can lead to null pointer dereferen...