CVE-2024-27037 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27037 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27051 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27051 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27078 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27078 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27061 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27061 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27058 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27058 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-46813 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2023-46813 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-51779 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2023-51779 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

AZL-42117 CVE-2024-35857 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL dereferences from icmpbuildprobe First problem is a double call to indevgetrcu, because the second one could return NULL. if indevgetrcudev && indevgetrcudev-ifalist Second problem is a read from...

AZL-42139 CVE-2024-35852 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak when canceling rehash work The rehash delayed work is rescheduled with a delay if the number of credits at end of the work is not negative as supposedly it means that the migration ended...

AZL-42100 CVE-2024-35854 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during rehash The rehash delayed work migrates filters from one region to another according to the number of available credits. The migrated from region is destroyed at the end ...

AZL-42118 CVE-2024-35849 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfsioctllogicaltoino Syzbot reported the following information leak for in btrfsioctllogicaltoino: BUG: KMSAN: kernel-infoleak in instrumentcopytouser include/linux/instrumented.h:114 inline BUG:...

AZL-42156 CVE-2024-27418 affecting package hyperv-daemons for versions less than 5.15.158.2-1

In the Linux kernel, the following vulnerability has been resolved: net: mctp: take ownership of skb in mctplocaloutput Currently, mctplocaloutput only takes ownership of skb on success, and we may leak an skb if mctplocaloutput fails in specific states; the skb ownership isn't transferred until...

AZL-40679 CVE-2024-27397 affecting package hyperv-daemons for versions less than 5.15.158.2-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: use timestamp to check for set element timeout Add a timestamp field at the beginning of the transaction, store it in the nftables per-netns area. Update set backend .insert, .deactivate and sync gc path to u...

AZL-40565 CVE-2024-27396 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtpdellink Since callrcu, which is called in the hlistforeachentryrcu traversal of gtpdellink, is not part of the RCU read critical section, it is possible that the RCU grace period will pass durin...

AZL-40298 CVE-2024-27078 affecting package hyperv-daemons for versions less than 6.6.29.1-1

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpgalloc In tpgalloc, resources should be deallocated in each and every error-handling paths, since they are allocated in for statements. Otherwise there would be memleaks because tpgfree is...

AZL-40328 CVE-2024-27051 affecting package hyperv-daemons for versions less than 6.6.29.1-1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: brcmstb-avs-cpufreq: add check for cpufreqcpuget's return value cpufreqcpuget may return NULL. To avoid NULL-dereference check it and return 0 in case of error. Found by Linux Verification Center linuxtesting.org with...

AZL-40334 CVE-2024-27061 affecting package hyperv-daemons for versions less than 6.6.29.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Fix use after free in unprepare sun8icecipherunprepare should be called before cryptofinalizeskcipherrequest, because client callbacks may immediately free memory, that isn't needed anymore. But it will be used...

AZL-40331 CVE-2024-27045 affecting package hyperv-daemons for versions less than 6.6.29.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a potential buffer overflow in 'dpdscclockenread' Tell snprintf to store at most 10 bytes in the output buffer instead of 30. Fixes the below:...

AZL-46027 CVE-2024-27018 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: skip conntrack input hook for promisc packets For historical reasons, when bridge device is in promisc mode, packets that are directed to the taps follow bridge input hook path. This patch adds a workaroun...

AZL-42031 CVE-2024-27018 affecting package hyperv-daemons for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: skip conntrack input hook for promisc packets For historical reasons, when bridge device is in promisc mode, packets that are directed to the taps follow bridge input hook path. This patch adds a workaroun...