DEBIAN-CVE-2021-47379

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd KASAN reports a use-after-free report when doing fuzz test: 693354.104835 ================================================================== 693354.105094 BUG:...

CVE-2021-46984

In the Linux kernel, the following vulnerability has been resolved: kyber: fix out of bounds access when preempted blkmqschedbiomerge gets the ctx and hctx for the current CPU and passes the hctx to -biomerge. kyberbiomerge then gets the ctx for the current CPU again and uses that to get the...

Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: kyber: fix out of bounds access when preempted blkmqschedbiomerge gets the ctx and hctx for the current CPU and passes the hctx to -biomerge. kyberbiomerge then gets the ctx for the current CPU again and uses that to get the...

kernel: Linux kernel: Denial of Service due to use-after-free in BFQ scheduler

A flaw was found in the Linux kernel. A use-after-free UAF vulnerability exists in the block I/O input/output queueing layer, specifically within the Budget Fair Queueing BFQ scheduler. This occurs because the bfqexiticqbfqq function can free a bfqq object before bicsetbfqq accesses it, leading t...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ubi: Fix race condition between ctrlcdevioctl and ubicdevioctl CVE-2021-47634 In the Linux kernel, the following vulnerability has been resolved: Revert "Revert "block, bfq: honor already-setup queue merges""...

SUSE CVE-2020-12657

An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bfqidleslicetimerbody...

GSD-2023-1002042 block, bfq: replace 0/1 with false/true in bic apis

block, bfq: replace 0/1 with false/true in bic apis This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.93 by commit...

GSD-2023-1001882 block, bfq: fix uaf for bfqq in bic_set_bfqq()

block, bfq: fix uaf for bfqq in bicsetbfqq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

RHEL 8 : kpatch-patch (RHSA-2020:2669)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2669 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Security Fixe...

RHEL 8 : kpatch-patch (RHSA-2020:2567)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2567 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Security Fixe...

GSD-2023-1001044 block, bfq: fix possible uaf for 'bfqq->bic'

block, bfq: fix possible uaf for 'bfqq-bic' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

PT-2023-34043 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.86 through v5.15.86 Description: A use-after-free UAF issue exists in the bfq code for the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

GSD-2022-1002221 bfq: fix use-after-free in bfq_dispatch_request

bfq: fix use-after-free in bfqdispatchrequest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1002054 bfq: fix use-after-free in bfq_dispatch_request

bfq: fix use-after-free in bfqdispatchrequest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001478 bfq: fix use-after-free in bfq_dispatch_request

bfq: fix use-after-free in bfqdispatchrequest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

PT-2025-8107

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the BFQ scheduler of the Linux kernel. The problem occurs within the bfq bfqq move function in the block/bfq-cgroup.c module, where memory that has alrea...

openSUSE: Security Advisory for systemd (openSUSE-SU-2021:3348-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:3348-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa on a path bsc1188063. - logind: terminate cleanly on SIGTERM/SIGINT bsc1188018. - Adopting BFQ to control I/O jscSLE-21032, bsc1134353. - Rules weren't applied to dm devices multipath bsc1188713. - Ignore...

SUSE-SU-2021:3348-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa on a path bsc1188063. - logind: terminate cleanly on SIGTERM/SIGINT bsc1188018. - Adopting BFQ to control I/O jscSLE-21032, bsc1134353. - Rules weren't applied to dm devices multipath bsc1188713. - Ignore...

Security update for systemd (moderate)

openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2021:3348-1 Rating: moderate References: 1134353 1171962 1184994 1188018 1188063 1188291 1188713 1189480 1190234 SLE-21032 Cross-References: CVE-2021-33910 CVSS scores: CVE-2021-33910 NVD : 5.5...