PT-2021-25323

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.237 Description: The issue is related to the initialization of notify work in the bonding module, which could lead to uninitialized use. The actual impact and attack plausibility have not yet been proven...

PT-2021-29404

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not yet...

PT-2021-29334

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.195 Description The issue is related to the initialization of notify work in the bonding module, which could lead to uninitialized use. The actual impact and attack plausibility have not yet been proven...

UVI-2021-1000828 bonding: init notify_work earlier to avoid uninitialized use

bonding: init notifywork earlier to avoid uninitialized use This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.273 by commit...

NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

PT-2021-25299

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.273 Description: The issue is related to the bonding driver in the Linux Kernel, where the notify work is initialized earlier to avoid uninitialized use. The actual impact and attack plausibility have not y...

PT-2021-1167

Name of the Vulnerable Software and Affected Versions: NetworkManager affected versions not specified Description: NetworkManager is a system network service that manages network devices and connections. It has capabilities including managing Ethernet, wireless, mobile broadband WWAN, and PPPoE...

PT-2021-29293

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.273 Description The issue is related to the initialization of notify work in the bonding module, which could lead to uninitialized use. The actual impact and attack plausibility have not yet been proven...

SUSE: Security Advisory (SUSE-SU-2021:0742-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unbreakable Enterprise kernel security update

4.14.35-2047.500.9.1 - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492110 CVE-2021-26930 - xen-scsiback: dont 'handle' error by BUG Jan Beulich Orabug: 32492102 CVE-2021-26931 - xen-netback: dont 'handle' error by BUG Jan Beulich Orabug: 32492102 CVE-2021-26931 -...

Unbreakable Enterprise kernel security update

5.4.17-2036.103.3 - Revert 'rds: Deregister all FRWR mr with freemr' aru kolappan Orabug: 32426610 5.4.17-2036.103.2 - A/A Bonding: Fix a one-byte-off kmalloc Hakon Bugge Orabug: 32380824 - netfilter: add and use nfhookslowlist Florian Westphal Orabug: 32372530 CVE-2021-20177 - net/rds: Fix gfpt...

CVE-2020-15802

Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit an unauthenticated user to establish a bonding with one transport, either LE or BR/EDR, and replace a bonding already...

CVE-2020-15802

Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit an unauthenticated user to establish a bonding with one transport, either LE or BR/EDR, and replace a bonding already...

UBUNTU-CVE-2020-15802

Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit an unauthenticated user to establish a bonding with one transport, either LE or BR/EDR, and replace a bonding already...

CVE-2020-15802

Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit an unauthenticated user to establish a bonding with one transport, either LE or BR/EDR, and replace a bonding already...

CVE-2020-15802: Improper Authentication

Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit an unauthenticated user to establish a bonding with one transport, either LE or BR/EDR, and replace a bonding already...

PT-2020-14641

Name of the Vulnerable Software and Affected Versions Bluetooth versions 4.0 through 5.0 Description The issue concerns a man-in-the-middle attack, also known as BLURtooth, which affects devices supporting Bluetooth before version 5.1. This attack exploits the Cross Transport Key Derivation in...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1379)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-14386: Fixed an overflow in tpacketrcv in afpacket that could lead to a local privilege escalation bsc1176069. The following non-security bugs were fixed : -...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1382)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-14314: Fixed potential negative array index in dosplit in ext4 bsc1173798. - CVE-2020-14386: Fixed an overflow in afpacket, which could lead to local privilege...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:1382-1 Rating: important References: 1065729 1071995 1085030 1133021 1154492 1156395 1159058 1160634 1169790 1171634 1171688 1172108 1172418 1172871 1173485 1173798 1174003 1174026 1174387 1174699...