Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable due to a deadlock flaw in btrfs when there is not enough free space in system spaceinfo. A local attacker can exploit this vulnerability to cause a denial of service situation...

UVI-2021-1001210 btrfs: fix deadlock with concurrent chunk allocations involving system chunks

btrfs: fix deadlock with concurrent chunk allocations involving system chunks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

GSD-2021-1001210 btrfs: fix deadlock with concurrent chunk allocations involving system chunks

btrfs: fix deadlock with concurrent chunk allocations involving system chunks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

PT-2021-29675

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.13.3 Description A potential issue exists due to a deadlock with concurrent chunk allocations involving system chunks. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2021-25680

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.13.3 Description: A potential issue exists due to a deadlock with concurrent chunk allocations involving system chunks in the btrfs filesystem. The actual impact and attack plausibility have not yet been...

GO-2021-0100 Denial of service via deadlock in github.com/containers/storage

Due to a goroutine deadlock, using github.com/containers/storage/pkg/archive.DecompressStream on a xz archive returns a reader which will hang indefinitely when Close is called. An attacker can use this to cause denial of service if they are able to cause the caller to attempt to decompress an...

Virtuozzo Hybrid Infrastructure 4.5 Update 2

This update provides bug fixes and improvements. Vulnerability id: VSTOR-44043 With backup storage geo-replication, promotion to the primary cluster fails with the error: "name 'payload' is not defined." Vulnerability id: VSTOR-43126 A deadlock is possible between atomic and non-atomic commands i...

Virtuozzo Hybrid Infrastructure 4.6 Update 1

This update provides new features, as well as bug fixes and improvements. Vulnerability id: VSTOR-45315 The MDS service may be unstable under a high load condition. Vulnerability id: VSTOR-43126 A deadlock is possible between atomic and non-atomic commands in the iSCSI kernel module. Vulnerabilit...

containers/storage: DoS via malicious image

A deadlock vulnerability was found in github.com/containers/storage. When a container image is processed, each layer is unpacked using tar. If one of those layers is not a valid tar archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar...

SUSE-SU-2021:2473-1 Security update for slurm

This update for slurm fixes the following issues: Updated to 20.11.7 Summary of new features: CVE-2021-31215: Fixed a remote code execution as SlurmUser bsc1186024. slurmd - handle configless failures gracefully instead of hanging indefinitely. select/constres - fix Dragonfly topology not selecti...

PT-2021-4256

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13.4 Description The issue is related to the btrfs implementation in the Linux kernel, which can lead to a denial of service due to uncontrolled memory allocation. This can occur when there is a shortage of fre...

UVI-2021-1001085 mac80211: fix deadlock in AP/VLAN handling

mac80211: fix deadlock in AP/VLAN handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

GSD-2021-1001085 mac80211: fix deadlock in AP/VLAN handling

mac80211: fix deadlock in AP/VLAN handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

GSD-2021-1001031 usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler

usb: cdnsp: Fix deadlock issue in cdnspthreadirqhandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

UVI-2021-1001031 usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler

usb: cdnsp: Fix deadlock issue in cdnspthreadirqhandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

WS-2021-0288

Linux Kernel in versions v5.12 to before v5.12.13 has a deadlock in AP/VLAN handling...

PT-2021-25556

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.12.12 Description: A potential issue exists in the mac80211 component related to AP/VLAN handling, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven...

PT-2021-29550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.12 Description A potential issue exists in the mac80211 component related to AP/VLAN handling, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven...

PT-2021-25502

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.12.10 Description: A deadlock issue exists in the cdnsp thread irq handler. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.12 through...

PT-2021-29496

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.10 Description A deadlock issue was found in the cdnsp thread irq handler. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.12 through...