974 matches found
Rocky Linux 8 [CIQ] Security Update: device-mapper-multipath / device-mapper-multipath-debuginfo / etc (crlsa-2022_7928)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227928 advisory. device-mapper-multipath: Regression of CVE-2022-41974 fix in Rocky Linux CVE-2022-3787 Tenable has extracted the preceding description block directly from the CIQ...
Rocky Linux 8.6 [CIQ] Security Update: device-mapper-multipath / device-mapper-multipath-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0919)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260919 advisory. This advisory aggregates security fixes for the device-mapper-multipath SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2022-3787, CVE-2022-41974. Tenable...
Rocky Linux 9 [CIQ] Security Update: device-mapper-multipath / device-mapper-multipath-debuginfo / etc (crlsa-2022_7185)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227185 advisory. device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket CVE-2022-41974 Tenable has extracted the...
Rocky Linux 8.8 [CIQ] Security Update: device-mapper-multipath / device-mapper-multipath-debuginfo / etc (ciqsa-2026_0361)
The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260361 advisory. This advisory aggregates security fixes for the device-mapper-multipath SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2022-3787. Tenable has extracted the precedin...
Rocky Linux 8.6 [CIQ] Security Update: device-mapper-multipath / device-mapper-multipath-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0031)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260031 advisory. This advisory aggregates security fixes for the device-mapper-multipath SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2022-41973, CVE-2009-0115. Tenable...
Rocky Linux 9 [CIQ] Security Update: device-mapper-multipath / device-mapper-multipath-debuginfo / etc (crlsa-2022_8453)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228453 advisory. device-mapper-multipath: Regression of CVE-2022-41974 fix in Rocky Linux CVE-2022-3787 Tenable has extracted the preceding description block directly from the CIQ...
Security update for multipath-tools
This update for multipath-tools fixes the following issues: Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. Path traversal in device-mapper-multipath failedwwids management bsc1277210. SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows bsc127721...
SUSE-SU-2026:4406-1 Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...
kernel: dm log: fix out-of-bounds write due to region_count overflow
A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...
PT-2026-109726
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failed wwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...
DEBIAN-CVE-2026-97902
In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...
CVE-2026-97902
In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...
UBUNTU-CVE-2026-97902
In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...
EUVD-2026-86756
In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...
CVE-2026-97902
In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...
kernel: dm cache policy smq: fix missing locks in invalidating cache blocks
A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...
kernel: dm cache policy smq: fix missing locks in invalidating cache blocks
A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...
kernel: dm cache policy smq: fix missing locks in invalidating cache blocks
A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...
kernel: dm cache policy smq: fix missing locks in invalidating cache blocks
A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitset iteration causes out-of-bounds acces...