SUSE CVE-2024-26584

In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTOTFMREQMAYBACKLOG flag on our requests to the crypto API, cryptoaeadencrypt,decrypt can return -EBUSY instead of -EINPROGRESS in valid situations. For...

AZL-40183 CVE-2024-26584 affecting package kernel for versions less than 5.15.158.2-1

In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTOTFMREQMAYBACKLOG flag on our requests to the crypto API, cryptoaeadencrypt,decrypt can return -EBUSY instead of -EINPROGRESS in valid situations. For...

DEBIAN-CVE-2024-26584

In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTOTFMREQMAYBACKLOG flag on our requests to the crypto API, cryptoaeadencrypt,decrypt can return -EBUSY instead of -EINPROGRESS in valid situations. For...

UBUNTU-CVE-2024-26584

In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTOTFMREQMAYBACKLOG flag on our requests to the crypto API, cryptoaeadencrypt,decrypt can return -EBUSY instead of -EINPROGRESS in valid situations. For...

CVE-2024-26584

In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTOTFMREQMAYBACKLOG flag on our requests to the crypto API, cryptoaeadencrypt,decrypt can return -EBUSY instead of -EINPROGRESS in valid situations. For...

CVE-2024-26584

CVE-2024-26584 is a Linux kernel vulnerability in the TLS crypto path affecting crypto_aead_encrypt/decrypt when CRYPTO_TFM_REQ_MAY_BACKLOG is used. Under valid backlogged conditions (e.g., full cryptd queue for AESNI), crypto_aead_{encrypt,decrypt} may return -EBUSY instead of -EINPROGRESS. In s...

PT-2024-1849

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's handling of backlogging of crypto requests. When the CRYPTO TFM REQ MAY BACKLOG flag is set on requests to the crypto API, crypto aead...

cups security and bug fix update

1:2.2.6-54 - RHEL-2612 - cups pulls an unneeded dependency on python3 1:2.2.6-53 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation 1:2.2.6-52 - 2217178 - Delays printing to lpd when reserved ports are exhausted - 2217283 - The command 'cancel -x ' does not remove job fil...

cups security and bug fix update

1:2.3.3op2-21 - bump the spec because the previous build was made with buildroot 9.2 1:2.3.3op2-20 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation 1:2.3.3op2-19 - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient in scheduler/client.c - CVE-2023-32324 cups: heap...

kernel: tcp: fix a signed-integer-overflow bug in tcp_add_backlog()

A flaw was found in the Linux kernel’s TCP implementation in the function tcpaddbacklog. When calculating the maximum acceptable backlog for TCP sockets, the sum of the receive buffer skrcvbuf, the send buffer sksndbuf, and a fixed constant may exceed the maximum value of a signed integer due to...

org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.10-beta-1, <=2.12), org.jenkins-ci.plugins:backlog (>=2.0, <=2.6) potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (2.7)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =2.10-beta-1, =2.0,...

SUSE CVE-2010-4251

The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service memory consumption by sending a large amount of network traffic, as demonstrated by netperf UDP tests...

SUSE CVE-2010-4805

The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the skaddbacklog function and the skrmemalloc...

SUSE CVE-2014-4667

The sctpassociationfree function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service socket outage via a crafted SCTP packet...

PT-2025-40201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the crypto/xts module where it incorrectly handles EBUSY errors. The module only processes the EINPROGRESS return value, leading to a use-after-free...

PT-2025-38352

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the seqiv function does not correctly handle the EBUSY return value when the caller specifies MAY BACKLOG. This can lead to a use-after-free...

PT-2022-34883 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: A signed-integer-overflow bug was found in the tcp add backlog function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-35426 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.153 Description: A signed-integer-overflow bug was found in the tcp add backlog function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-35200 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: A signed-integer-overflow bug was found in the tcp add backlog function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.9 and...

PT-2025-53983

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed-integer-overflow bug exists in the tcp add backlog function within the TCP implementation of the Linux kernel. The sk rcvbuf and sk sndbuf variables within the struct sock are o...