GSD-2022-1000645 net: sched: fix use-after-free in tc_new_tfilter()

net: sched: fix use-after-free in tcnewtfilter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.6 by commit...

PT-2022-28674

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to the net sched component in the Linux Kernel. It involves adding rcu annotation to netdev-qdisc. The actual impact and attack plausibility have not yet been proven...

PT-2022-28741

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue is related to the net sched component in the Linux Kernel. It involves adding rcu annotation to netdev-qdisc. The actual impact and attack plausibility have not yet been proven...

PT-2022-28827

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to the net sched component in the Linux Kernel. It involves adding an rcu annotation to netdev-qdisc. The actual impact and attack plausibility have not yet been proven...

PT-2022-7632

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.26/5.16.12 Description The issue is related to a race condition in the sched fork function, which can be exploited to gain elevated privileges on vulnerable systems. This occurs because a task is not placed ...

GSD-2022-1000164 net: sched: fix use-after-free in tc_new_tfilter()

net: sched: fix use-after-free in tcnewtfilter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.177 by commit...

PT-2022-7640 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.14 cycle Description: The issue is related to the Linux kernel's symmetric multiprocessing SMP component, specifically with the calculation of sibling and core maps. After enabling CONFIG SCHED CORE, which was...

PT-2022-7629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a synchronization error in the reweight entity function of the Linux kernel's sched component, which can cause a null pointer dereference. This occurs due to a ra...

CVE-2022-24155

Tenda AX3 v16.03.12.10CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service DoS via the schedStartTime and schedEndTime parameters...

CVE-2022-24155

Tenda AX3 v16.03.12.10CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service DoS via the schedStartTime and schedEndTime parameters...

GSD-2021-1002742 net/sched: sch_ets: don't remove idle classes from the round-robin list

net/sched: schets: don't remove idle classes from the round-robin list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002698 net/sched: sch_ets: don't remove idle classes from the round-robin list

net/sched: schets: don't remove idle classes from the round-robin list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002542 net/sched: sch_ets: don't peek at classes beyond 'nbands'

net/sched: schets: don't peek at classes beyond 'nbands' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

GSD-2021-1002510 net/sched: fq_pie: prevent dismantle issue

net/sched: fqpie: prevent dismantle issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002477 net/sched: sch_ets: don't peek at classes beyond 'nbands'

net/sched: schets: don't peek at classes beyond 'nbands' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...

PT-2021-27062

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.8 Description The issue is related to the fq pie component in the net/sched module. It was introduced in version v5.6 and fixed in version v5.15.8. The actual impact and attack plausibility have not yet bee...

PT-2021-26978

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.85 Description The issue is related to the fq pie component in the net/sched module. It was introduced in version v5.6 and fixed in version v5.10.85. The actual impact and attack plausibility have not yet...

PT-2021-1514

Name of the Vulnerable Software and Affected Versions Linux kernel versions affected versions not specified Android kernel versions affected versions not specified Description The issue is related to a use after free memory corruption in the kernel/sched/wait.c component of the Linux operating...

kernel security, bug fix, and enhancement update

4.18.0-305.25.14.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...