USN-5857-1: Linux kernel (OEM) vulnerability

Davide Ornaghi discovered that the netfilter subsystem in the Linux kernel did not properly handle VLAN headers in some situations. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

USN-5856-1: Linux kernel (OEM) vulnerabilities

Davide Ornaghi discovered that the netfilter subsystem in the Linux kernel did not properly handle VLAN headers in some situations. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-0179 Hu Jiahui discovered that multiple race...

Moderate: Red Hat Security Advisory: Red Hat OpenShift (Logging Subsystem) security update

Logging Subsystem 5.6.1 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the Referenc...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerability (USN-5857-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5857-1 advisory. Davide Ornaghi discovered that the netfilter subsystem in the Linux kernel did not properly handle VLAN headers in some situations. A local attacker could use thi...

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5859-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5859-1 advisory. Davide Ornaghi discovered that the netfilter subsystem in the Linux kernel did not properly handle VLAN headers in some situations. A local attacker coul...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2023-013 (ALASKERNEL-5.15-2023-013)

The version of kernel installed on the remote host is prior to 5.15.90-54.138. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2023-013 advisory. In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows a...

Linux kernel io_uring Heap Buffer Overflow DoS

The vulnerability of the ioinstallfixedfile function in the iouring/filetable.c module of the iouring subsystem in the Linux kernel is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2023-12109)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12109 advisory. - USB: core: Prevent nested device-reset calls Alan Stern Orabug: 34951641 CVE-2022-4662 - Bluetooth: L2CAP: Fix accepting connection request for...

Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel

...

PT-2025-43101

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the max9286 v4l2 register function within the media subsystem. This leak occurs when testing the media/i2c/max9286.c file with a bpf mock devic...

A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash.

...

PT-2023-34834 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, specifically the pn533 driver. It involves waiting for out urb's completion. The actual impact...

PT-2023-34867 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, specifically with the pn533 driver. It involves waiting for the completion of out urb in this...

PT-2023-34879 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.230 Description: A race condition exists between mounting and unmounting in the gadgetfs of the USB subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34812 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: A race condition exists between mounting and unmounting in the gadgetfs of the USB subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34849 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: A race condition exists between mounting and unmounting in the gadgetfs of the USB subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34891 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.229 Description: The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, where it does not wait for out urb's completion. This could potentially lead to security...

PT-2023-34907 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.270 Description: The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, where it does not wait for out urb's completion. This could potentially lead to security...

PT-2023-34762 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: A potential security issue has been identified in the Linux Kernel, specifically in the omapfb module of the fbdev subsystem. The issue is related to a stack overflow warning. The actual impa...

PT-2023-34824 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: A potential security issue has been identified in the Linux Kernel, specifically in the omapfb module of the fbdev subsystem. The issue is related to a stack overflow warning. The actual...