GSD-2023-1002376 net/sched: tcindex: update imperfect hash filters respecting rcu

net/sched: tcindex: update imperfect hash filters respecting rcu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.169 by commit...

PT-2023-35382

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.1.13 Description The issue is related to the tcindex in net/sched, where imperfect hash filters are not updated respecting RCU. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2023-35423

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.95 Description The issue is related to the tcindex in net/sched, where imperfect hash filters are not updated respecting RCU. The actual impact and attack plausibility have not yet been proven...

PT-2023-35451

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.169 Description The issue is related to the tcindex in net/sched, where imperfect hash filters are not updated respecting RCU. The actual impact and attack plausibility have not yet been proven...

SUSE CVE-2020-25598

An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEMacquireresource error path. The RCU Read, Copy, Update mechanism is a synchronisation primitive. A buggy error path in the XENMEMacquireresource exits without releasing an RCU reference, which is conceptually similar to...

SUSE CVE-2022-20153

In rcucblistdequeue of rcusegcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

GSD-2023-1001995 drm/vmwgfx: Remove rcu locks from user resources

drm/vmwgfx: Remove rcu locks from user resources This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-35071

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.1.7 Description The issue concerns the removal of rcu locks from user resources in the drm/vmwgfx component. It was introduced in version v4.20 and fixed in version v6.1.7. The actual impact and attack...

GSD-2023-1001703 drm/vmwgfx: Remove rcu locks from user resources

drm/vmwgfx: Remove rcu locks from user resources This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-34779 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue concerns the removal of rcu locks from user resources in the drm/vmwgfx component. It was introduced in version v4.20 and is fixed in Linux Kernel version v6.1.7. The actual impact...

GSD-2023-1001311 ovl: fix use inode directly in rcu-walk mode

ovl: fix use inode directly in rcu-walk mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000979 ovl: fix use inode directly in rcu-walk mode

ovl: fix use inode directly in rcu-walk mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

PT-2023-34056 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue concerns the use of an inode directly in RCU-walk mode. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33618 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns the use of an inode directly in RCU-walk mode. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-34388

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns a fix in the Linux Kernel where an inode is used directly in RCU-walk mode. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-34437

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a lockdep warning in the rcu force quiescent state function when using this cpu read. The actual impact and attack plausibility have not yet been proven...

PT-2023-33691

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a lockdep warning in the rcu force quiescent state function when using this cpu read. The actual impact and potential for attack have not been proven yet. Recommendatio...

PT-2023-34114

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a lockdep warning in the rcu force quiescent state function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

kernel: inet: fully convert sk->sk_rx_dst to RCU rules

A use-after-free vulnerability was found in the TCP IP protocol in the Linux Kernel, where a delete operation of the RCU-protected pointer is supposed to clear the pointer before the callrcu/synchronizercu guarding the actual memory freeing. This flaw allows a local attacker to crash the system o...

kernel: netfilter: conntrack: re-fetch conntrack after insertion

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: re-fetch conntrack after insertion In case the conntrack is clashing, insertion can free skb-nfct and set skb-nfct to the already-confirmed entry. This wasn't found before because the conntrack entry and the...