705 matches found
AZL-27643 CVE-2023-32247 affecting package hyperv-daemons for versions less than 5.15.145.2-1
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2SESSIONSETUP commands. The issue results from the lack of control of resource consumption. An attacker can leverage this vulnerability to create a...
AZL-27635 CVE-2023-32252 affecting package hyperv-daemons for versions less than 5.15.145.2-1
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to creat...
AZL-27639 CVE-2023-32257 affecting package hyperv-daemons for versions less than 5.15.145.2-1
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2SESSIONSETUP and SMB2LOGOFF commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage th...
AZL-27640 CVE-2023-32258 affecting package hyperv-daemons for versions less than 5.15.145.2-1
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...
AZL-27638 CVE-2023-33952 affecting package hyperv-daemons for versions less than 5.15.158.1-1
A double-free vulnerability was found in handling vmwbufferobject objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to...
AZL-27642 CVE-2023-38432 affecting package hyperv-daemons for versions less than 5.15.122.1-1
An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read...
AZL-27671 CVE-2023-38409 affecting package hyperv-daemons for versions less than 5.15.122.1-1
An issue was discovered in setcon2fbmap in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Because an assignment occurs only for the first vc, the fbconregisteredfb and fbcondisplay arrays can be desynchronized in fbconmodedeleted the con2fbmap points at the old fbinfo...
AZL-27641 CVE-2023-32250 affecting package hyperv-daemons for versions less than 5.15.145.2-1
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2SESSIONSETUP commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerabilit...
AZL-27634 CVE-2023-32254 affecting package hyperv-daemons for versions less than 5.15.145.2-1
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2TREEDISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...
AZL-27636 CVE-2023-3338 affecting package hyperv-daemons for versions less than 5.15.158.1-1
A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system...
AZL-34801 CVE-2023-3338 affecting package hyperv-daemons for versions less than 6.6.35.1-1
A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system...
AZL-27332 CVE-2023-3359 affecting package hyperv-daemons for versions less than 5.15.118.1-1
An issue was discovered in the Linux kernel brcmnvramparse in drivers/nvmem/brcmnvram.c. Lacks for the check of the return value of kzalloc can cause the NULL Pointer Dereference...
AZL-27329 CVE-2023-3439 affecting package hyperv-daemons for versions less than 5.15.126.1-1
A flaw was found in the MCTP protocol in the Linux kernel. The function mctpunregister reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev-addrs object, potentially leading to a denial of servi...
AZL-31612 CVE-2023-3389 affecting package hyperv-daemons for versions less than 5.15.135.1-1
A use-after-free vulnerability in the Linux Kernel iouring subsystem can be exploited to achieve local privilege escalation. Racing a iouring cancel poll request with a linked timeout can cause a UAF in a hrtimer. We recommend upgrading past commit ef7dfac51d8ed961b742218f526bd589f3900a59...
AZL-27331 CVE-2023-35826 affecting package hyperv-daemons for versions less than 5.15.158.1-1
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrusremove in drivers/staging/media/sunxi/cedrus/cedrus.c...
CVE-2023-23000 affecting package hyperv-daemons 5.10.179.1-1
CVE-2023-23000 affecting package hyperv-daemons 5.10.179.1-1. An upgraded version of the package is available that resolves this issue...
CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-2513)
The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2513 advisory. - A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it...
CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-31436)
The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-31436 advisory. - qfqchangeclass in net/sched/schqfq.c in the Linux kernel before 6.2.13 allows an...