AZL-26983 CVE-2023-1989 affecting package hyperv-daemons for versions less than 5.15.118.1-1

A use-after-free flaw was found in btsdioremove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdioremove with an unfinished job, may cause a race problem leading to a UAF on hdev devices...

The vulnerability affects the automount demons of the Tor browser, Firefox, Firefox ESR, and the Thunderbird email client, allowing a hacker to bypass security restrictions.

The vulnerability in Tor browser, Firefox, Firefox ESR, and Thunderbird email client’s automatic uninstallation feature is related to insufficient protection of service data during file path processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotel...

CVE-2022-4379 affecting package hyperv-daemons 5.10.172.1-1

CVE-2022-4379 affecting package hyperv-daemons 5.10.172.1-1. This CVE either no longer is or was never applicable...

AZL-26142 CVE-2023-1855 affecting package hyperv-daemons for versions less than 5.15.107.1-1

A use-after-free flaw was found in xgenehwmonremove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver xgene-hwmon. This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem...

AZL-25900 CVE-2023-1670 affecting package hyperv-daemons for versions less than 5.15.107.1-1

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC-card Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2022-3707)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3707 advisory. - A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-26545)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-26545 advisory. - In the Linux kernel before 6.1.13, there is a double free in net/mpls/afmpls.c upon an...

CVE-2022-3707 affecting package hyperv-daemons for versions less than 5.15.102.1-1

CVE-2022-3707 affecting package hyperv-daemons for versions less than 5.15.102.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-26545 affecting package hyperv-daemons for versions less than 5.15.102.1-1

CVE-2023-26545 affecting package hyperv-daemons for versions less than 5.15.102.1-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2022-47940)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47940 advisory. - An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-0266)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0266 advisory. - A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-23454)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-23454 advisory. - cbqclassify in net/sched/schcbq.c in the Linux kernel through 6.1.4 allows attackers to cau...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2022-47929)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47929 advisory. - In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-0394)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0394 advisory. - A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2022-4379)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-4379 advisory. - A use-after-free vulnerability was found in nfs42sscopen in fs/nfs/nfs4file.c in the Linux kernel. Th...

AZL-25607 CVE-2022-3707 affecting package hyperv-daemons for versions less than 5.15.102.1-1

A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intelgvtdmamapguestpage function. This issue could allow a local user to crash the system...

CVE-2022-27666 affecting package hyperv-daemons 5.10.167.1-1

CVE-2022-27666 affecting package hyperv-daemons 5.10.167.1-1. A patched version of the package is available...

CVE-2022-0742 affecting package hyperv-daemons 5.10.167.1-1

CVE-2022-0742 affecting package hyperv-daemons 5.10.167.1-1. A patched version of the package is available...

CVE-2023-0266 affecting package hyperv-daemons 5.10.167.1-1

CVE-2023-0266 affecting package hyperv-daemons 5.10.167.1-1. A patched version of the package is available...

AZL-25901 CVE-2023-23000 affecting package hyperv-daemons for versions less than 5.15.111.1-1

In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegraxusbfindportnode return value. Callers expect NULL in the error case, but an error pointer is used...