CVE-2022-48935 netfilter: nf_tables: unregister flowtable hooks on netns exit

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: unregister flowtable hooks on netns exit Unregister flowtable hooks before they are releases via nftablesflowtabledestroy otherwise hook core reports UAF. BUG: KASAN: use-after-free in...

CVE-2022-48935

CVE-2022-48935 concerns a Linux kernel vulnerability in netfilter nf_tables. The issue arises when unregistering flowtable hooks on netns exit: if flowtable hooks are not unregistered before nf_tables_flowtable_destroy(), the hook core can report a use-after-free (KASAN) in nf_hook_entries_grow. ...

CVE-2022-48935 netfilter: nf_tables: unregister flowtable hooks on netns exit

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: unregister flowtable hooks on netns exit Unregister flowtable hooks before they are releases via nftablesflowtabledestroy otherwise hook core reports UAF. BUG: KASAN: use-after-free in...

CVE-2022-48913 blktrace: fix use after free for struct blk_trace

In the Linux kernel, the following vulnerability has been resolved: blktrace: fix use after free for struct blktrace When tracing the whole disk, 'dropped' and 'msg' will be created under 'q-debugfsdir' and 'bt-dir' is NULL, thus blktracefree won't remove those files. What's worse, the following...

CVE-2022-48913

The CVE-2022-48913 issue is a Linux kernel use-after-free in blk_trace (blktrace) allocated when tracing a full disk, where created files under q->debugfs_dir are not removed if bt->dir is NULL, allowing stale pointers (dropped, msg) to be dereferenced. The result is a KASAN-triggered use-a...

CVE-2022-48899 drm/virtio: Fix GEM handle creation UAF

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace can guess the handle value and try to race GEM object creation with handle close, resulting in a use-after-free if we dereference the object after dropping the handle's reference...

CVE-2024-43853

A use-after-free UAF flaw was found in the proccpusetshow function. This issue can allow an attacker to access the css of the root caused by a race condition when the cgrouproot should be freed when it is unmounted from the resource. Mitigation No mitigation is available for this issue other than...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_13_1 security update

An update for kpatch-patch-5140-427131 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-284_48_1 and kpatch-patch-5_14_0-284_52_1 security update

An update for kpatch-patch-5140-284481 and kpatch-patch-5140-284521 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which give...

RHEL 8 : kpatch-patch-4_18_0-477_43_1 (RHSA-2024:5520)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:5520 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch...

RHEL 8 : kpatch-patch-4_18_0-305_120_1 (RHSA-2024:5519)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:5519 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module i...

RHEL 9 : kpatch-patch-5_14_0-284_48_1 and kpatch-patch-5_14_0-284_52_1 (RHSA-2024:5521)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5521 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module i...

RHEL 9 : kpatch-patch-5_14_0-427_13_1 (RHSA-2024:5523)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:5523 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module i...

CVE-2024-43853

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proccpusetshow An UAF can happen when /proc/cpuset is read as reported in 1. This can be reproduced by the following methods: 1.add an mdelay1000 before acquiring the cgrouplock In the cgrouppathns...

CVE-2024-43853 cgroup/cpuset: Prevent UAF in proc_cpuset_show()

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proccpusetshow An UAF can happen when /proc/cpuset is read as reported in 1. This can be reproduced by the following methods: 1.add an mdelay1000 before acquiring the cgrouplock In the cgrouppathns...

CVE-2024-43853

Technical details for CVE-2024-43853 are not publicly available in the provided documents. The materials summarize the UAF in proc_cpuset_show() but do not specify affected products, versions, or patches beyond kernel/cgroup references; monitor for updates.

CVE-2024-43853 cgroup/cpuset: Prevent UAF in proc_cpuset_show()

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proccpusetshow An UAF can happen when /proc/cpuset is read as reported in 1. This can be reproduced by the following methods: 1.add an mdelay1000 before acquiring the cgrouplock In the cgrouppathns...

CVE-2024-43853 cgroup/cpuset: Prevent UAF in proc_cpuset_show()

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proccpusetshow An UAF can happen when /proc/cpuset is read as reported in 1. This can be reproduced by the following methods: 1.add an mdelay1000 before acquiring the cgrouplock In the cgrouppathns...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-36971)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36971 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: fix dstnegativeadvice race...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...