AZL-34880 CVE-2024-23851 affecting package kernel for versions less than 6.6.35.1-4

copyparams in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INTMAX bytes, and crash, because of a missing paramkernel-datasize check. This is related to ctlioctl...

PT-2024-1294

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 6.7.1 Description The issue is related to the copy params function in the Linux kernel, which can attempt to allocate more than INT MAX bytes and crash due to a missing param kernel-data size check. This is...

PT-2019-4979

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.1.5 Description An issue was discovered in the MPT3COMMAND case in ctl ioctl main in drivers/scsi/mpt3sas/mpt3sas ctl.c. It allows local users to cause a denial of service or possibly have unspecified other impa...

PT-2016-6761

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.6 Description The issue is related to a race condition in the sclp ctl ioctl sccb function, which allows local users to obtain sensitive information from kernel memory. This is achieved by changing a certain...