Lucene search
K

757 matches found

OSV
OSV
added 2022/08/12 11:15 a.m.5 views

AZL-10559 CVE-2022-2503 affecting package kernel for versions less than 5.15.67.1-4

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear...

6.7CVSS7AI score0.0035EPSS
Exploits1References1
OSV
OSV
added 2022/08/12 11:15 a.m.1 views

DEBIAN-CVE-2022-2503

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear...

6.7CVSS7AI score0.0035EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2022/08/12 11:15 a.m.41 views

CVE-2022-2503

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear...

6.9CVSS7.1AI score0.0035EPSS
Exploits1References16
OSV
OSV
added 2022/08/12 11:15 a.m.0 views

UBUNTU-CVE-2022-2503

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear...

6.9CVSS7AI score0.0035EPSS
Exploits1References17
Cvelist
Cvelist
added 2022/08/12 12:0 a.m.27 views

CVE-2022-2503 Linux Kernel LoadPin bypass via dm-verity table reload

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear...

6.9CVSS7.6AI score0.0035EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2022/08/12 12:0 a.m.32 views

CVE-2022-2503

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear...

6.9CVSS6.1AI score0.0035EPSS
Exploits1
Rockylinux
Rockylinux
added 2022/08/02 6:58 a.m.11 views

device-mapper-multipath bug fix and enhancement update

An update is available for device-mapper-multipath. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The device-mapper-multipath packages provide tools that use t...

1.1AI score
Exploits0
RedHat Linux
RedHat Linux
added 2022/07/19 9:14 p.m.0 views

kernel: dm: fix mempool NULL pointer race when completing IO

In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO dmiodecpending calls endioacct first and will then dec md in-flight pending count. But if a task is swapping DM table at same time this can result in a crash due to...

4.7CVSS6.2AI score0.00239EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/07/13 8:45 a.m.2 views

kernel: dm integrity: fix memory corruption when tag_size is less than digest size

In the Linux kernel, the following vulnerability has been resolved: dm integrity: fix memory corruption when tagsize is less than digest size It is possible to set up dm-integrity in such a way that the "tagsize" parameter is less than the actual digest size. In this situation, a part of the dige...

7.8CVSS6.3AI score0.00263EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2022/07/01 12:5 a.m.4 views

kernel: dm integrity: fix memory corruption when tag_size is less than digest size

In the Linux kernel, the following vulnerability has been resolved: dm integrity: fix memory corruption when tagsize is less than digest size It is possible to set up dm-integrity in such a way that the "tagsize" parameter is less than the actual digest size. In this situation, a part of the dige...

7.8CVSS6.3AI score0.00263EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2022/06/28 12:32 p.m.0 views

kernel: dm: fix mempool NULL pointer race when completing IO

In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO dmiodecpending calls endioacct first and will then dec md in-flight pending count. But if a task is swapping DM table at same time this can result in a crash due to...

4.7CVSS6.2AI score0.00239EPSS
Exploits0References4
Rockylinux
Rockylinux
added 2022/05/17 7:52 a.m.6 views

new packages: device-mapper-persistent-data

An update is available for device-mapper-persistent-data. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, se...

2AI score
Exploits0
RedHat Linux
RedHat Linux
added 2022/05/10 1:58 p.m.1 views

kernel: dm: fix mempool NULL pointer race when completing IO

In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO dmiodecpending calls endioacct first and will then dec md in-flight pending count. But if a task is swapping DM table at same time this can result in a crash due to...

4.7CVSS6.2AI score0.00239EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/05/10 1:58 p.m.1 views

kernel: dm rq: don't queue request to blk-mq during DM suspend

In the Linux kernel, the following vulnerability has been resolved: dm rq: don't queue request to blk-mq during DM suspend DM uses blk-mq's quiesce/unquiesce to stop/start device mapper queue. But blk-mq's unquiesce may come from outside events, such as elevator switch, updating nrrequests or...

5.5CVSS6.3AI score0.0021EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2022/05/10 1:43 p.m.3 views

kernel: dm: fix mempool NULL pointer race when completing IO

In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO dmiodecpending calls endioacct first and will then dec md in-flight pending count. But if a task is swapping DM table at same time this can result in a crash due to...

4.7CVSS6.2AI score0.00239EPSS
Exploits0References4
Rockylinux
Rockylinux
added 2022/05/10 8:14 a.m.12 views

device-mapper-multipath bug fix and enhancement update

An update is available for device-mapper-multipath. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

2AI score
Exploits0
AlmaLinux
AlmaLinux
added 2022/05/10 8:14 a.m.20 views

device-mapper-multipath bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

1.6AI score
Exploits0References1
Rockylinux
Rockylinux
added 2022/05/10 8:14 a.m.12 views

device-mapper-persistent-data bug fix and enhancement update

An update is available for device-mapper-persistent-data. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, se...

2AI score
Exploits0
AlmaLinux
AlmaLinux
added 2022/05/10 8:14 a.m.12 views

device-mapper-persistent-data bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

1.6AI score
Exploits0References1
Rockylinux
Rockylinux
added 2022/04/26 1:49 p.m.9 views

device-mapper-multipath bug fix and enhancement update

An update is available for device-mapper-multipath. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The device-mapper-multipath packages provide tools that use t...

1.5AI score
Exploits0
Rows per page
Query Builder