Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Set SDEVOFFLINE when UFS is shut down There is a history of deadlock issues when a reboot is performed at the beginning of booting. After UFS shuts down, SDEVQUIESCE is set for all LU’s scsidevices. At that time,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Do not keep the queue frozen during system suspension. The commit 4ce6e2db00de “virtio-blk: Ensure no requests are in the virtqueues before deleting the vqs.” replaces “queue quiesce” with “queue freeze” in virtio-blk...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Fixed deadlock with the SPI chip variant When SMP is enabled and spinlocks are actually functional, there is a deadlock with the ‘statelock’ spinlock between ks8851startxmitspi and ks8851irq: Watchdog: BUG: Soft lock...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netrom: fixed a possible deadlock in nrrtioctl syzbot discovered a possible deadlock in nrrtioctl 1 Make sure we always acquire nrnodelistlock before using nrnodelocknrnode. 1 WARNING: a circular locking dependency was detecte...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: The issue with mcp251x: where a deadlock occurs when an interrupt occurs during mcp251xopen has been fixed. The mcp251xhwwake function is called with the mpclock mutex held, and the interrupt handler is disabled so that no...

Azure Linux 3.0 Security Update: kernel (CVE-2024-26934)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26934 advisory. - In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-27014)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27014 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent deadlock while...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39476)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39476 advisory. - In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix deadlock that raid5d wait...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42153)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42153 advisory. - In the Linux kernel, the following vulnerability has been resolved: i2c: pnx: Fix potential deadlock warning...

Azure Linux 3.0 Security Update: kernel (CVE-2024-26933)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26933 advisory. - In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port disable...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49985)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49985 advisory. - In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: Do not prepare/unprepare...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50006)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50006 advisory. - In the Linux kernel, the following vulnerability has been resolved: ext4: fix idatasem unlock order in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-43855)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43855 advisory. - In the Linux kernel, the following vulnerability has been resolved: md: fix deadlock between mddevsuspend an...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47739)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47739 advisory. - In the Linux kernel, the following vulnerability has been resolved: padata: use integer wrap around to preve...

Azure Linux 3.0 Security Update: kernel (CVE-2024-44995)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44995 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix a deadlock problem when...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27002)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27002 advisory. - In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: Do a runtime PM g...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46791)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46791 advisory. - In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix deadlock if an interru...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fix notifier vs folio deadlock User is reporting what smells like notifier vs folio deadlock, where migratepagesbatch on core kernel side is holding folio locks and then interacting with the mappings of it, howeve...

Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak.

Summary Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak. RedHat UBI images are used by IBM Robotic Process Automation base containers. This bulletin identifies the security fixes to apply to address the vulnerabilities. Vulnerability Details...

Security update for etcd

This update for etcd fixes the following issues: Security Update to version 3.5.18: Ensure all goroutines created by StartEtcd to exit before closing the errc mvcc: restore tombstone index if it's first revision Bump go toolchain to 1.22.11 Avoid deadlock in etcd.Close when stopping during...