USN-6766-1: Linux kernel vulnerabilities

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service system crash. CVE-2024-1151 Sander Wiebing, Alvise de Faveri Tron, Herbert...

Linux kernel (OEM) vulnerabilities

Releases Ubuntu 22.04 LTS Packages linux-oem-6.5 - Linux kernel for OEM systems Details Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause ...

RXSA-2024:1607 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vmwgfx: NULL pointer dereference in vmwcmddxdefinequery CVE-2022-38096 kernel: Out of boundary write in perfreadgroup as result of overflow a perfevent's readsize CVE-2023-6931 kernel: GS...

Important: Red Hat Security Advisory: updated rhceph-6.1 container image

Updated container image for Red Hat Ceph Storage 6.1 is now available in the Red Hat Ecosystem Catalog. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilitie...

Critical: Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security and bug fix update

An update is now available for Red Hat Ceph Storage 6.1 in the Red Hat Ecosystem Catalog. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support...

RHEL 8 / 9 : Red Hat Ceph Storage 6.1 (RHSA-2024:2631)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2631 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Fedora 40 : ceph (2024-1c5e37820f)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1c5e37820f advisory. ceph-18.2.2 GA ---- Add support for riscv64 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

RHEL 7 : Red Hat OpenStack Platform director (RHSA-2018:1627)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1627 advisory. Red Hat OpenStack Platform director provides the facilities for deploying and monitoring a private or public infrastructure-as-a-service Iaa...

RHEL 7 : Red Hat OpenStack Platform director (RHSA-2018:1593)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1593 advisory. Red Hat OpenStack Platform director provides the facilities for deploying and monitoring a private or public infrastructure-as-a-service Iaa...

GHSA-5X96-J797-5QQW Sensitive Information leak via Log File in Kubernetes

In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects v1.19.3, v1.18.10, v1.17.13...

Sensitive Information leak via Log File in Kubernetes

In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects v1.19.3, v1.18.10, v1.17.13...

CVE-2019-19646 affecting package ceph for versions less than 18.2.1-1

CVE-2019-19646 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-11655 affecting package ceph for versions less than 18.2.1-1

CVE-2020-11655 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-1999023 affecting package ceph for versions less than 18.2.1-1

CVE-2018-1999023 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-13434 affecting package ceph for versions less than 18.2.1-1

CVE-2020-13434 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-13632 affecting package ceph for versions less than 18.2.1-1

CVE-2020-13632 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0670 affecting package ceph for versions less than 18.2.1-1

CVE-2022-0670 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-19645 affecting package ceph for versions less than 18.2.1-1

CVE-2019-19645 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-11656 affecting package ceph for versions less than 18.2.1-1

CVE-2020-11656 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...