Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2024-38606: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate slices count returned by FW The function adfsendadmintlstart enables the telemetry TL feature on a QAT device by sending the ICPQATFWTLSTART message to the firmware. This triggers the FW to start writing TL...

PT-2024-28079

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the validation of slices count returned by firmware in the Linux kernel's crypto: qat module. The function adf send admin tl start enables the telemetry feature o...

CVE-2024-26974

A race condition was found in drivers/crypto/intel/qat/qatcommon/adfaer.c in the Linux kernel during AER recovery...

CVE-2024-26974

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's error recovery process, the kernel driver may encounter a race condition with freeing the resetdata structure's memory. If the device restart wi...

DEBIAN-CVE-2021-47056

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit ADFSTATUSPFRUNNING is only used and checked by adfvf2pfshutdown before calling adfiovputmsg-mutexlockvf2pflock, however the vf2pflock is initialized in adfdevinit,...

PT-2023-36566

Уязвимость функции qat alg skcipher init com модуля drivers/crypto/qat/qat common/qat algs.c драйвера криптографического ускорителя ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-35306

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description The issue concerns a fix for DMA transfer direction in the crypto: qat module. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.17 and fixed...

PT-2022-35043 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a fix for DMA transfer direction in the crypto: qat module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-32584

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description A potential security issue has been identified in the crypto: qat component of the Linux Kernel, related to the Diffie-Hellman DH protocol. The actual impact and attack plausibility have not...

PT-2022-32360

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.8 through v5.18.14 Description A memory leak was discovered in the RSA implementation of the crypto: qat module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32358

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description A potential security issue has been identified in the crypto: qat component of the Linux Kernel, related to the Diffie-Hellman DH protocol. The actual impact and attack plausibility have not...

PT-2022-32357

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description A potential security issue has been identified in the crypto: qat component related to RSA, where a parameter check has been added. The actual impact and attack plausibility of this issue hav...

PT-2022-32586

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description A memory leak issue was discovered in the RSA component of the crypto: qat module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-32585

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description A potential security issue has been identified in the crypto: qat component of the Linux Kernel, related to RSA. The actual impact and attack plausibility have not yet been proven...

PT-2021-24947

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.233 Description: The issue is related to the crypto: qat module in the Linux Kernel, where ADF STATUS PF RUNNING should be set after adf dev init. The actual impact and attack plausibility have not yet bee...

PT-2021-28757

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to the crypto: qat module in the Linux Kernel, where ADF STATUS PF RUNNING should be set after adf dev init. The actual impact and attack plausibility have not yet been...

PT-2021-28941

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.233 Description The issue is related to the crypto: qat module in the Linux Kernel, where ADF STATUS PF RUNNING should be set after adf dev init. The actual impact and attack plausibility have not yet been...

PT-2021-24909

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.119 Description: The issue is related to the crypto: qat module in the Linux Kernel, where ADF STATUS PF RUNNING should be set after adf dev init. The actual impact and attack plausibility have not yet been...

PT-2021-28926

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.191 Description The issue is related to the crypto: qat module in the Linux Kernel, where ADF STATUS PF RUNNING should be set after adf dev init. The actual impact and attack plausibility have not yet been...