AlmaLinux 8 : kernel (5316) (ALSA-2022:5316)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5316 advisory. - A buffer over-read at the framebuffer layer in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory,...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.55 and fixes at least the following security issues: There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges CVE-2022-2318. Xen Block and Networ...

SUSE-SU-2022:2376-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information...

GSD-2022-1004080 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004000 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003904 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003789 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003640 ALSA: usb-audio: Cancel pending work at closing a MIDI substream

ALSA: usb-audio: Cancel pending work at closing a MIDI substream This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003632 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003631 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by comm...

GSD-2022-1003427 ALSA: usb-audio: Cancel pending work at closing a MIDI substream

ALSA: usb-audio: Cancel pending work at closing a MIDI substream This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003425 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commi...

GSD-2022-1003404 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003160 ALSA: usb-audio: Cancel pending work at closing a MIDI substream

ALSA: usb-audio: Cancel pending work at closing a MIDI substream This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003155 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003120 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commi...

GSD-2022-1002848 ALSA: usb-audio: Cancel pending work at closing a MIDI substream

ALSA: usb-audio: Cancel pending work at closing a MIDI substream This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002841 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002786 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

alsa-sof-firmware bug fix update

An update is available for alsa-sof-firmware. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The alsa-sof-firmware package contains the firmware binaries for th...