GSD-2022-1001193 powerpc/pseries: Fix use after free in remove_phb_dynamic()

powerpc/pseries: Fix use after free in removephbdynamic This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001138 powerpc/tm: Fix more userspace r13 corruption

powerpc/tm: Fix more userspace r13 corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001137 powerpc/kasan: Fix early region not updated correctly

powerpc/kasan: Fix early region not updated correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001047 powerpc/code-patching: Pre-map patch area

powerpc/code-patching: Pre-map patch area This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1001044 powerpc/secvar: fix refcount leak in format_show()

powerpc/secvar: fix refcount leak in formatshow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1000989 powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit

powerpc: Fix virtaddrvalid for 64-bit Book3E & 32-bit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-29411

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.17.1 Description The issue is related to userspace r13 corruption in the powerpc/tm component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3....

PT-2022-29320

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.3 Description The issue is related to powerpc/code-patching and pre-mapping the patch area. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-29487

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.17.1 Description The issue concerns the use of DSISR for SLB faults on powerpc/64s. It was introduced in version v5.5 and fixed in version v5.17.2. The actual impact and attack plausibility have not yet be...

PT-2022-29803

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.16.18 Description The issue is related to the use of DSISR for SLB faults on powerpc/64s. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.5...

PT-2022-30118

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.15.32 Description The issue concerns the use of DSISR for SLB faults on powerpc/64s. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.5 throu...

PT-2022-30052

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the powerpc/kasan component, where an early region is not updated correctly. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29410

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the powerpc/kasan component, where an early region is not updated correctly. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-30315

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to the powerpc/kasan component, where an early region is not updated correctly. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30490

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to the powerpc/kasan in the Linux Kernel, where an early region is not updated correctly. The actual impact and attack plausibility have not yet been proven...

PT-2022-29732

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the powerpc/kasan in the Linux Kernel, where an early region is not updated correctly. The actual impact and attack plausibility have not yet been proven...

Security Bulletin: Vulnerability in Linux Kernel affects IBM Integrated Analytics System.

Summary Linux Kernel used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVECVE-2020-27777 . Vulnerability Details CVEID: CVE-2020-27777 DESCRIPTION: Linux Kernel for PowerPC could allow a local authenticated attacker to bypass security...

SUSE-SU-2022:1108-1 Security update for util-linux

This update for util-linux fixes the following issues: - Improve throughput and reduce clock sequence increments for high load situation with time based version 1 uuids. bsc1194642 - Prevent root owning of /var/lib/libuuid/clock.txt. bsc1194642 - Warn if uuidd lock state is not usable. bsc1194642...

OPENSUSE-SU-2022:0930-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2022-0358: Fixed a potential privilege escalation via virtiofsd bsc1195161. - CVE-2021-3930: Fixed a potential denial of service in the emulated SCSI device bsc1192525. Non-security fixes: - Fixed a kernel data corruption via a long kernel bo...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2022:0930-1 Rating: important References: 1178049 1192525 1193364 1193545 1194938 1195161 1196087 1196737 Cross-References: CVE-2021-3930 CVE-2022-0358 CVSS scores: CVE-2021-3930 NVD : 6.5...