GSD-2022-1002730 bonding: fix missed rcu protection

bonding: fix missed rcu protection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit 85eed460681da71b359ed906bce4d800081db854, i...

GSD-2022-1002573 mt76: fix use-after-free by removing a non-RCU wcid pointer

mt76: fix use-after-free by removing a non-RCU wcid pointer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31417

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential issue exists due to a race in schedule and flush work in rcu-tasks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31898

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A potential issue exists due to a race in schedule and flush work in rcu-tasks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31106

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential issue exists due to a race in schedule and flush work in rcu-tasks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-30993

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.18.2 Description A potential security issue exists due to missed RCU protection in the bonding module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31670

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A potential issue exists due to a race in schedule and flush work in rcu-tasks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.13 Description The issue is related to missed RCU protection in bonding. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.17 through...

PT-2022-30836

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a use-after-free error in the mt76 module. This error occurs when a non-RCU wcid pointer is removed. The actual impact and potential for attack have not been proven yet...

SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2172-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2172-1 advisory. - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection...

PT-2025-26103

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0 Description The Linux kernel has a vulnerability related to RCU priority boosting. This issue can occur in two situations: when the total number of CPUs is higher than those brought online at boot, and whe...

PT-2025-8632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where a read can race with an invalidation followed by another read, potentially replacing a folio with a higher-order folio. This can lea...

DEBIAN-CVE-2022-20153

In rcucblistdequeue of rcusegcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

CVE-2022-20141

In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

new packages: userspace-rcu

An update is available for userspace-rcu. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

PT-2022-29672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue concerns the rtw89 core txq push function, specifically its RCU usage. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions...

PT-2022-29335

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue concerns the rtw89 core txq push function, specifically its RCU usage. The actual impact and potential for attack have not been confirmed. Recommendations For Linux Kernel versions...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CLSA-2022-1650377026 Fix of CVE: CVE-2021-3609, CVE-2022-28390

can: emsusb: emsusbstartxmit: fix double devkfreeskb in error path ELSCVE-3847 CVE-2022-28390 - can: bcm: delay release of struct bcmop after synchronizercu ELSCVE-1694 CVE-2021-3609...

GSD-2022-1000569 staging: vc04_services: Fix RCU dereference check

staging: vc04services: Fix RCU dereference check This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...