Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

ALSA-2021:2714 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sizet-to-int conversion vulnerability in the filesystem layer CVE-2021-33909 kernel: race condition for removal of the HCI controller CVE-2021-32399 For more details about the security...

RLSA-2021:2714 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sizet-to-int conversion vulnerability in the filesystem layer CVE-2021-33909 kernel: race condition for removal of the HCI controller CVE-2021-32399 For more details about the security...

kernel security and bug fix update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

UVI-2021-1001041 KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message

KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

PT-2021-29428

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM on x86 systems. It was introduced in version v5.4 and fixed in version v5.10.44. The actual impact and...

PT-2021-29368

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.126 Description The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM on x86 systems. It was introduced in Linux Kernel version v5.4 and fixed in version v5.4.126. The actual...

PT-2021-25512

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.11 Description: The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM x86. It was introduced in version v5.4 and fixed in version v5.12.11. The actual impact and attack...

PT-2021-29506

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.11 Description The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM on x86 systems. It was introduced in version v5.4 and fixed in version v5.12.11. The actual impact and...

PT-2021-25434

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM x86. It was introduced in version v5.4 and fixed in version v5.10.44. The actual impact and attack...

PT-2021-25374

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.126 Description: The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM on x86 systems. It was introduced in version v5.4 and fixed in version v5.4.126. The actual impact and...

imagemagick:ping_mvg_fuzzer: Heap-buffer-overflow in TracePoint

Detailed Report: https://oss-fuzz.com/testcase?key=5961114448953344 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0xf0d87070 Crash State: TracePoint...

imagemagick:ping_mvg_fuzzer: Crash in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5383530736648192 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

imagemagick:encoder_mvg_fuzzer: Heap-buffer-overflow in TracePoint

Detailed Report: https://oss-fuzz.com/testcase?key=5194014708072448 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0xf68bfa08 Crash State: TracePoint...

graphicsmagick/coder_MVG_fuzzer: Heap-buffer-overflow in TracePoint

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5699661139017728 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Heap-use-after-free in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4827467318558720 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_mvg_fuzzer: Heap-use-after-free in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5550962654576640 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4883041250967552 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_mvg_fuzzer: Heap-buffer-overflow in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4843923225706496 Project: imagemagick Fuzzer: aflimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5655158907207680 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...