kernel security update

5.14.0-503.40.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

The vulnerability in the Windows 10 22H2 operating system, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure in the operating system’s kernel.

The vulnerability of the Windows 10 22H2 operating system is related to the assignment of the null pointer. Exploiting this vulnerability can allow an attacker to cause a kernel failure in the operating system...

The vulnerability of the HTTP request processor daemon in the TRENDnet TEW-410APB wireless access point software allows a attacker to cause a service failure.

The vulnerability of the HTTP request processor in TRENDnet TEW-410APB wireless access points is related to the zero pointer swapping issue. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending a specially crafted POST request...

The vulnerability of the Fluent Bit logging collection and processing tool, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure.

The vulnerability of the Fluent Bit logging and processing tool is related to the assignment of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially crafted HTTP request...

The vulnerability of the DirectX component in Windows operating systems, which allows a hacker to cause a system failure

The vulnerability of the DirectX component in Windows operating systems is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the PCX Image development platform’s SDP code base allows attackers to trigger a service failure.

The vulnerability of the PCX Image development platform’s SDP code base is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control devices, related to the handling of the zero pointer, allows a violator to trigger a service failure.

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

SUSE CVE-2021-47649

In the Linux kernel, the following vulnerability has been resolved: udmabuf: validate ubuf-pagecount Syzbot has reported GPF in sgallocappendtablefrompages. The problem was in ubuf-pages == ZEROPTR. ubuf-pagecount is calculated from arguments passed from user-space. If user creates udmabuf with...

UBUNTU-CVE-2021-47649

In the Linux kernel, the following vulnerability has been resolved: udmabuf: validate ubuf-pagecount Syzbot has reported GPF in sgallocappendtablefrompages. The problem was in ubuf-pages == ZEROPTR. ubuf-pagecount is calculated from arguments passed from user-space. If user creates udmabuf with...

Vulnerability of components of Linux operating system’s kernel/mlx5, allowing a hacker to cause a service failure

The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the SSL-VPN portal for FortiOS operating systems allows a hacker to induce a service failure.

The vulnerability of the SSL-VPN portal for FortiOS operating systems is related to the assignment of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Boost library in the Mercedes-Benz MBUX multimedia system, related to the manipulation of the zero pointer, allows a intruder to compromise the accessibility of protected information.

The vulnerability of the Boost library in the Mercedes-Benz MBUX multimedia system is related to a pointer assignment error. Exploiting this vulnerability could allow an attacker to compromise the accessibility of the protected information...

The vulnerability of the Moby container isolation system creation software, related to the swapping of the zero pointer, allows a intruder to trigger a service failure.

The vulnerability of the Moby container isolation system creation software is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the DHIP microprogramming-based IP camera from Lorex 2K Indoor Wi-Fi Security Camera allows a intruder to escalate their privileges to root level and gain full access to the device.

The vulnerability of the DHIP microprogramming-based IP camera from Lorex 2K Indoor Wi-Fi Security Camera lies in the manipulation of the zero pointer. Exploiting this vulnerability allows an attacker to escalate their privileges to root and gain full access to the device through a connection usi...

The vulnerabilities of the disable_show() and disable_store() functions in the Linux kernel USB driver allow attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the disableshow and disablestrore functions in the drivers/usb/core/port.c file of the Linux kernel’s USB driver is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected...

The vulnerability of the SAP NetWeaver AS ABAP and SAP ABAP Platform software integration platform, related to the manipulation of the zero pointer, allows attackers to trigger a service failure.

The vulnerability of the SAP NetWeaver AS ABAP and SAP ABAP Platform software integration platform is related to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Ivanti Avalanche device management system, related to the swapping of the zero indicator, allows a intruder to trigger a service failure.

The vulnerability of the Ivanti Avalanche device management system is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to trigger a service failure remotely...

The vulnerability of the Ivanti Avalanche device management system, related to the swapping of the zero indicator, allows a intruder to trigger a service failure.

The vulnerability of the Ivanti Avalanche device management system is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to trigger a service failure remotely...

The vulnerability of the software for providing secure remote access to data in the GlobalProtect App software from Palo Alto Networks allows a perpetrator to cause service interruptions.

The vulnerability of the software for providing secure remote access to data in the GlobalProtect App software from Palo Alto Networks relates to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of Palo Alto Networks’ operating system PAN-OS, related to the assignment of the zero pointer, allows a perpetrator to trigger a service failure.

The vulnerability of Palo Alto Networks’ PAN-OS operating system relates to the handling of the zero pointer. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...