OESA-2024-1337 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on th...

OESA-2024-1336 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on th...

CVE-2021-47140

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...

CVE-2021-47137

In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory allocation or dma mapping fails, an invalid address is programmed into the descriptor. This can lead to memory corruption. If the memory allocation fails,...

DEBIAN-CVE-2021-47161

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix a resource leak in an error handling path 'dspirequestdma' should be undone by a 'dspireleasedma' call in the error handling path of the probe function, as already done in the remove function...

UBUNTU-CVE-2021-47161

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix a resource leak in an error handling path 'dspirequestdma' should be undone by a 'dspireleasedma' call in the error handling path of the probe function, as already done in the remove function...

CVE-2021-47140

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...

CVE-2021-47137

In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory allocation or dma mapping fails, an invalid address is programmed into the descriptor. This can lead to memory corruption. If the memory allocation fails,...

CVE-2021-47137

In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory allocation or dma mapping fails, an invalid address is programmed into the descriptor. This can lead to memory corruption. If the memory allocation fails,...

CVE-2021-47140

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...

DEBIAN-CVE-2021-47140

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...

UBUNTU-CVE-2021-47137

In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory allocation or dma mapping fails, an invalid address is programmed into the descriptor. This can lead to memory corruption. If the memory allocation fails,...

UBUNTU-CVE-2021-47140

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...

CVE-2021-47140 iommu/amd: Clear DMA ops when switching domain

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...

CVE-2021-47140

CVE-2021-47140 affects the Linux kernel’s IOMMU path for AMD. The root cause is that when changing the default IOMMU domain for an IOMMU group, dev->dma_ops is not cleared when switching from a DMA to an identity domain, causing the DMA layer to use dma-iommu ops on an identity domain and trig...

CVE-2021-47140

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...

CVE-2021-47140 iommu/amd: Clear DMA ops when switching domain

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...

CVE-2021-47137 net: lantiq: fix memory corruption in RX ring

In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory allocation or dma mapping fails, an invalid address is programmed into the descriptor. This can lead to memory corruption. If the memory allocation fails,...

CVE-2021-47137

CVE-2021-47137 affects the Linux kernel in the net/lantiq RX ring handling. When memory allocation or DMA mapping fails, an invalid address can be programmed into the RX descriptor, causing memory corruption. The fix updates the RX path to drop/reuse skb mappings appropriately and increments the ...

CVE-2021-47137 net: lantiq: fix memory corruption in RX ring

In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory allocation or dma mapping fails, an invalid address is programmed into the descriptor. This can lead to memory corruption. If the memory allocation fails,...