[SECURITY] [DSA 5207-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5207-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 15, 2022 https://www.debian.org/security/faq -...

An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

...

Linux kernel has unspecified vulnerabilities (CNVD-2022-54887)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel version 5.18.14 and earlier versions have a security vulnerability that stems from xfrmexpandpolicies in net/xfrm/xfrmpolicy.c that causes refcount to be deleted twice. No detailed...

DEBIAN-CVE-2022-36879

An issue was discovered in the Linux kernel through 5.18.14. xfrmexpandpolicies in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice...

AZL-10401 CVE-2022-36879 affecting package kernel for versions less than 5.15.67.1-4

An issue was discovered in the Linux kernel through 5.18.14. xfrmexpandpolicies in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice...

CVE-2022-36879

An issue was discovered in the Linux kernel through 5.18.14. xfrmexpandpolicies in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice...

Code injection

An issue was discovered in the Linux kernel through 5.18.14. xfrmexpandpolicies in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice...

CVE-2022-36879

An issue was discovered in the Linux kernel through 5.18.14. xfrmexpandpolicies in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice...

CVE-2022-36879

CVE-2022-36879 affects the Linux kernel: a flaw in xfrm_policy handling (xfrm_expand_policies) can cause a refcount to be dropped twice in net/xfrm/xfrm_policy.c. This is a local vulnerability with an availability impact (as per CVSS: 5.5, MEDIUM). The issue exists through kernel versions up to 5...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel version 5.18.14 and earlier versions have a security vulnerability that stems from xfrmexpandpolicies in net/xfrm/xfrmpolicy.c that causes refcount to be deleted twice. No detailed...

GSD-2022-1003961 net: xfrm: unexport __init-annotated xfrm4_protocol_init()

net: xfrm: unexport init-annotated xfrm4protocolinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003259 net: xfrm: unexport __init-annotated xfrm4_protocol_init()

net: xfrm: unexport init-annotated xfrm4protocolinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1002946 net: xfrm: unexport __init-annotated xfrm4_protocol_init()

net: xfrm: unexport init-annotated xfrm4protocolinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1000941 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.305 by commit 80080bbcb25d386add6482aea9969e89834a8678, it was...

GSD-2022-1000922 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.270 by commit d4d5190b942ac7a0f048db718c0a9f280b4fc2ce, it was...

GSD-2022-1000901 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.233 by commit 20fe64c54412ca42efb9ba07f856ed8cac6e007e, it was...

GSD-2022-1000876 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit ac858e4462bdc5c589b0c062420c09dab3e579cd, it was...

GSD-2022-1000834 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.104 by commit 4952faa77d8d1c4c146ac077e13d6245738979f4, it was...

GSD-2022-1000774 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.27 by commit 75cbedd333431381ef309c5b0968582c7ba4c8ee, it was...

GSD-2022-1000705 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.13 by commit 53b06e55c38b8f23f2552b83a3a07056a986fbda, it was...