AZL-25583 CVE-2023-26545 affecting package hyperv-daemons for versions less than 5.15.102.1-1

In the Linux kernel before 6.1.13, there is a double free in net/mpls/afmpls.c upon an allocation failure for registering the sysctl table under a new location during the renaming of a device...

SUSE CVE-2011-2522

Multiple cross-site request forgery CSRF vulnerabilities in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that 1 shut down daemons, 2 start daemons, 3 add shares, 4 remove shares, 5 add printers...

CVE-2022-4379 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-4379 affecting package hyperv-daemons for versions less than 5.15.92.1-1. This CVE either no longer is or was never applicable...

CVE-2022-47940 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-47940 affecting package hyperv-daemons for versions less than 5.15.92.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27666 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-27666 affecting package hyperv-daemons for versions less than 5.15.92.1-1. A patched version of the package is available...

CVE-2023-0266 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2023-0266 affecting package hyperv-daemons for versions less than 5.15.92.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-0394 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2023-0394 affecting package hyperv-daemons for versions less than 5.15.92.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-47929 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-47929 affecting package hyperv-daemons for versions less than 5.15.92.1-1. An upgraded version of the package is available that resolves this issue...

AZL-26405 CVE-2023-25012 affecting package hyperv-daemons for versions less than 5.15.118.1-1

The Linux kernel through 6.1.9 has a Use-After-Free in bigbenremove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long...

AZL-34804 CVE-2023-25012 affecting package hyperv-daemons for versions less than 6.6.14.1-1

The Linux kernel through 6.1.9 has a Use-After-Free in bigbenremove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long...

AZL-13190 CVE-2023-0266 affecting package hyperv-daemons for versions less than 5.15.92.1-1

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRVCTLIOCTLELEMREAD|WRITE32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past...

CVE-2023-23454 affecting package hyperv-daemons for versions less than 5.15.87.1-1

CVE-2023-23454 affecting package hyperv-daemons for versions less than 5.15.87.1-1. An upgraded version of the package is available that resolves this issue...

AZL-13168 CVE-2023-0394 affecting package hyperv-daemons for versions less than 5.15.92.1-1

A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash...

Important: Red Hat Security Advisory: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

hyperv-daemons bug fix update

An update is available for hyperv-daemons. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The hyperv-daemons packages provide a suite of daemons that are needed...

AZL-13123 CVE-2022-47929 affecting package hyperv-daemons for versions less than 5.15.92.1-1

In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service system crash via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdiscgraft in...

hyperv-daemons bug fix update

An update is available for hyperv-daemons. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The hyperv-daemons packages provide a suite of daemons that are needed...

AZL-13049 CVE-2023-23454 affecting package hyperv-daemons for versions less than 5.15.87.1-1

cbqclassify in net/sched/schcbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service slab-out-of-bounds read because of type confusion non-negative numbers can sometimes indicate a TCACTSHOT condition rather than valid classification results...

AZL-12931 CVE-2022-47940 affecting package hyperv-daemons for versions less than 5.15.92.1-1

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2write...

hyperv-daemons bug fix and enhancement update

An update is available for hyperv-daemons. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Lin...