Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: bcm – Fix pointer arithmetic In spu2dumpomd, the value of ptr is increased by ciphkeylen, instead of hashivlen. This could lead to exceeding the buffer boundaries. This bug has been fixed by changing ciphkeylen to...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47749)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47749 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39277)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39277 advisory. - In the Linux kernel, the following vulnerability has been resolved: dma-mapping: benchmark: handle NUMANONOD...

Azure Linux 3.0 Security Update: kernel (CVE-2024-43860)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43860 advisory. - In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxrproc: Skip over memory...

Azure Linux 3.0 Security Update: kernel (CVE-2024-38577)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38577 advisory. - In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix showrcutaskstracegpkthrea...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50000)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50000 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-38571)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38571 advisory. - In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fix null pointer...

CVE-2025-21680

In the Linux kernel, the following vulnerability has been resolved: pktgen: Avoid out-of-bounds access in getimixentries Passing a sufficient amount of imix entries leads to invalid access to the pktdev-imixentries array because of the incorrect boundary check. UBSAN: array-index-out-of-bounds in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50205)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50205 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by ze...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50000)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50000 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50160)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50160 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50006)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50006 advisory. - In the Linux kernel, the following vulnerability has been resolved: ext4: fix idatasem unlock order in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47749)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47749 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50180)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50180 advisory. - In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow...

CVE-2024-50180

In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow The values of the variables xres and yres are placed in strbuf. These variables are obtained from strbuf1. The strbuf1 array contains digit characters and a space if the array contains...

CVE-2024-50215

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: assign dhkey to NULL after kfreesensitive ctrl-dhkey might be used across multiple calls to nvmetsetupdhgroup for the same controller. So it's better to nullify it after release on error path in order to avoid double...

CVE-2024-50215 nvmet-auth: assign dh_key to NULL after kfree_sensitive

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: assign dhkey to NULL after kfreesensitive ctrl-dhkey might be used across multiple calls to nvmetsetupdhgroup for the same controller. So it's better to nullify it after release on error path in order to avoid double...

CVE-2024-50215

CVE-2024-50215 : The issue is in the Linux kernel nvmet-auth path. The controller key cb ctrl->dh_key could be reused after being freed in nvmet_destroy_auth() due to not nulling the pointer after kfree_sensitive. The fix, as cited in the connected Astra Linux/IBM/NVD entries, is to assign dh_...

CVE-2024-50215 nvmet-auth: assign dh_key to NULL after kfree_sensitive

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: assign dhkey to NULL after kfreesensitive ctrl-dhkey might be used across multiple calls to nvmetsetupdhgroup for the same controller. So it's better to nullify it after release on error path in order to avoid double...

DEBIAN-CVE-2024-50205

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The...