OESA-2023-1782 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open, aka a race...

PT-2024-14754

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the wifi: ath11k: fix dfs radar event locking in the Linux kernel. The ath11k active pdevs are protected by RCU, but the DFS radar event handling code calling...

PT-2024-14740

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the wifi: ath11k: fix gtk offload status event locking in the Linux kernel. The ath11k active pdevs are protected by RCU, but the gtk offload status event handlin...

PT-2024-14739

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the wifi: ath12k module in the Linux kernel, where the DFS-radar and temperature event handling code was not properly marked as a read-side critical section,...

PT-2023-9472

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to possible store tearing in the neigh periodic work function. It was found that an annotation was missing when deleting an RCU protected item from a list. To preven...

PT-2025-38365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth component of the Linux kernel. This issue occurs when clearing keys, potentially allowing for memory corruption. The fix addresses a scenar...

Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal

...

PT-2023-36572

Уязвимость функции ref scale init модуля kernel/rcu/refscale.c подсистемы синхронизации в многопоточных системах ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-54075

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc1-00134-gb9ed6de8d4ff 7 Description The Linux kernel contains a flaw within the rcuscale functionality. Specifically, the rcuscale.holdoff module parameter can be manipulated to delay the start of the rcu...

The vulnerability of the rcu_barrier() function in the ksmbd module of Linux operating systems allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the rcubarrier function in the ksmbd module of Linux kernels is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

PT-2025-40754

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc3+ Description The Linux kernel contained a deadlock issue within the net/mlx5e module, specifically in the tc route query code. The issue stemmed from an ABBA deadlock occurring when peer flows were...

Linux Kernel ksmbd RCU Callback Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

PT-2025-37896

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc1-rcu+ Description A flaw exists in the Linux kernel related to the rcu/rcuscale functionality. Specifically, the kfree scale thread threads continue to run after the rcuscale module is unloaded, leading ...

PT-2023-36747

Уязвимость функции rcu scale cleanup модуля kernel/rcu/rcuscale.c подсистемы синхронизации в многопоточных системах ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2023-2825

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to a synchronization error in the rcu barrier function of the ksmbd module in the Linux kernel, which can be exploited to elevate privileges and execute arbitrary...

CLSA-2023-1682418814 Fix CVE(s): CVE-2023-1281, CVE-2022-3903, CVE-2023-26545

Ubuntu: 4.15.0-209.220 bionic/linux: 4.15.0-209.220 -proposed tracker LP: 2011989 CVE-2023-26545 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-1281 - rcu: Upgrade rcuswapprotected to rcureplacepointer - net/sched: tcindex: update imperfect hash filters respectin...

CLSA-2023-1682416329 Fix CVE(s): CVE-2023-26545, CVE-2022-3903, CVE-2023-1281

Ubuntu: 4.15.0-209.220 bionic/linux: 4.15.0-209.220 -proposed tracker LP: 2011989 CVE-2023-26545 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-1281 - rcu: Upgrade rcuswapprotected to rcureplacepointer - net/sched: tcindex: update imperfect hash filters respectin...

PT-2023-36705

Уязвимость функции rcu irq enter check tick модуля kernel/rcu/tree.c подсистемы синхронизации в многопоточных системах ядра операционной системы Linux связана с выполнением цикла с недоступным условием выхода«Бесконечный цикл». Эксплуатация уязвимости может позволить нарушителю оказать воздействи...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

PT-2025-37670

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where invalid drv sta pre rcu remove calls could occur for stations that were not uploaded, potentially leading to data corruption due to uninitialized...