kernel: use-after-free in the TEE subsystem

A use-after-free flaw in the Linux kernel TEE Trusted Execution Environment subsystem was found in the way user calls ioctl TEEIOCOPENSESSION or TEEIOCINVOKE. A local user could use this flaw to crash the system or escalate their privileges on the system. If the Linux system non configured with t...

PT-2025-8256

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.1-rt17+ Description A issue in the Linux kernel has been identified where a sleeping function is called from an invalid context on RT kernel. This occurs when setting specific boot parameters, including "tra...

PT-2021-30314

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.50 through 5.10.75 Description The issue is related to the powerpc/smp component, specifically concerning the handling of the idle task preempt count during CPU offline operations. The actual impact and potential for...

PT-2021-26359

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v5.14.14 Description: The issue is related to the powerpc/smp component, specifically concerning the handling of the idle task preempt count during CPU offline operations. The actual impact and potential fo...

PT-2021-26319

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.50 through 5.10.75 Description: The issue is related to the powerpc/smp component, specifically concerning the handling of the idle task preempt count during CPU offline operations. The actual impact and potential f...

PT-2024-11448

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc2+ Description The issue arises when a CPU is offlined and then onlined again with PREEMPT COUNT=y, resulting in a BUG: scheduling while atomic error. This occurs because the arch cpu idle dead function...

PT-2024-11297

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a leak in kvm arch vcpu ioctl vcpu load due to vcpu put not being called if the user copy fails. This can result in preempt notifier corruption and crashes, among...

Near-Ubiquitous Microsoft RCE Bugs Affect All Versions of Windows

UPDATE Two Microsoft vulnerabilities, CVE-2019-1040 and CVE-2019-1019, would allow attackers to remotely execute malicious code on any Windows machine or authenticate to any web server that supports Windows Integrated Authentication WIA such as Exchange or ADFS. According to researchers at Preemp...

UBUNTU-CVE-2017-18261

The archtimerregreadstable macro in arch/arm64/include/asm/archtimer.h in the Linux kernel before 4.13 allows local users to cause a denial of service infinite recursion by writing to a file under /sys/kernel/debug in certain circumstances, as demonstrated by a scenario involving debugfs, ftrace,...

CVE-2017-18261

The archtimerregreadstable macro in arch/arm64/include/asm/archtimer.h in the Linux kernel before 4.13 allows local users to cause a denial of service infinite recursion by writing to a file under /sys/kernel/debug in certain circumstances, as demonstrated by a scenario involving debugfs, ftrace,...

PT-2018-6786

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13 Description: The issue allows local users to cause a denial of service, specifically infinite recursion, under certain circumstances. This can be achieved by writing to a file under /sys/kernel/debug, and a...

DLA-670-1 linux - security update

Bulletin has no description...

Network Time Protocol Crypto-NAK Preemptible Association Denial of Service Vulnerability

SUMMARY An off-path attacker can cause a preemptible client association to be demobilized by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled. Furthermore, if the attacker keeps sending cryp...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.250.2 - crypto: aesni - fix memory usage in GCM decryption Stephan Mueller Orabug: 21077389 CVE-2015-3331 2.6.39-400.250.1 - xen/pciback: Don't disable PCICOMMAND on PCI device reset. Konrad Rzeszutek Wilk Orabug: 20807440 CVE-2015-2150 - xen-blkfront: fix accounting of reqs when...

kernel security and bug fix update

kernel 2.6.18-371.3.1.0.1 - i386: fix MTRR code Zhenzhong Duan orabug 15862649 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use...

UBUNTU-CVE-2013-4255

The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a 1 PREEMPT, 2 SUSPEND, 3 CONTINUE, 4 WANTVACATE, or 5 KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of...

kernel security and bug fix update

kernel 2.6.18-348.1.1.0.1 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use KMNMI slot for kmapatomic orabug 14277030 - oprofile...