GSD-2021-1002699 dm btree remove: fix use after free in rebalance_children()

dm btree remove: fix use after free in rebalancechildren This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002673 dm btree remove: fix use after free in rebalance_children()

dm btree remove: fix use after free in rebalancechildren This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...

PT-2021-29813

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and attack plausibility have not yet been proven...

PT-2021-29920

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and attack plausibility have not yet been proven...

PT-2021-25895

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and attack plausibility have not yet been proven...

PT-2021-29853

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to the dm btree remove function, where a new root is assigned only when removal succeeds. The actual impact and attack plausibility have not yet been proven...

PT-2021-29890

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and potential for attack have not been proven yet...

PT-2021-25818

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and potential for attack have not been proven yet...

PT-2021-25954

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and attack plausibility have not yet been proven...

PT-2021-25925

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal operation is successful. The actual impact and potential for attack have not been prov...

PT-2021-25858

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and attack plausibility have not yet been proven...

PT-2021-29949

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue is related to the dm btree remove function, where a new root is assigned only when the removal is successful. The actual impact and attack plausibility have not yet been proven...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::enable_if<true, memory_view>::type APFSBtreeNode<memory_view, memory_v

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6739548603285504 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

PT-2024-11342

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to the dm btree remove function. The issue occurs when the remove raw function in dm btree remove fails due to an IO read...

PT-2024-11279

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the bcache feature in the Linux kernel, specifically in the cache missing code path. A potential kernel panic can occur due to an oversized read request. The cach...

Unbreakable Enterprise kernel security update

5.4.17-2036.100.6.1.el8uek - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040802 CVE-2020-8694 CVE-2020-8695 - KVM: ioapic: break infinite recursion on lazy EOI Vitaly Kuznetsov Orabug: 32066585 CVE-2020-27152 CVE-2020-27152 - x86/mitigations: Restore paranoid checks fo...

sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitestat1 sz field, aka a "severe division by zero in the query planner."...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2020-5848)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5848 advisory. - nfsd: apply umask on fs without ACL support J. Bruce Fields Orabug: 31779884 CVE-2020-24394 - bcache: fix potential deadlock problem in...

An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.

...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2152-1)

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth may have allowed an unauthenticated user to complete authentication...