xdp-tools bug fix and enhancement update

An update is available for xdp-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8....

Ubuntu 20.04 LTS : Linux kernel (GKE) vulnerabilities (USN-5648-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5648-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

Ubuntu 22.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-5640-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5640-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

PT-2022-33257

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.8 Description The issue concerns corrupted packets for XDP SHARED UMEM. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.19.8, update...

PT-2025-25898

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the XDP SHARED UMEM mode in the Linux kernel, where packets are corrupted for the second and any further sockets bound to the same umem. This does not affect the...

PT-2025-25991

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically within the virtio net component when handling XPD TX with mergeable functionality. The problem arises when the...

PT-2022-33090

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.250 Description A bug in the virtio net component related to xdp rxq info after suspend/resume has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-32889

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.127 Description The issue is related to a bug in the virtio net component, specifically with xdp rxq info after suspend/resume. The actual impact and attack plausibility have not yet been proven...

PT-2022-33004

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.16 through 5.4.201 Description A bug in the virtio net module related to xdp rxq info after suspend/resume has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-32521

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description A bug in the virtio net module related to xdp rxq info after suspend/resume has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32727

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.51 Description The issue is related to a bug in the virtio net module, specifically with xdp rxq info after suspend/resume. The actual impact and attack plausibility have not yet been proven. Recommendation...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.55 and fixes at least the following security issues: There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges CVE-2022-2318. Xen Block and...

CVE-2022-33743

An incomplete cleanup flaw was found in the Linux kernel’s Xen networking XDP eXpress Data Path subsystem. This flaw allows a local user to crash the system...

AZL-10107 CVE-2022-33743 affecting package kernel for versions less than 5.15.67.1-4

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

CVE-2022-33743

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

CVE-2022-33743

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

CVE-2022-33743

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

Path traversal

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

CVE-2022-33743

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

CVE-2022-33743

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...