CVE-2019-11059

Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow...

PT-2019-2822 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.1.2 Description: The issue is related to the fs/ext4/extents.c file in the Linux kernel, which does not properly clear unused memory regions in the extent tree block. This might allow local users to obtain...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0015)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/apic: Make archsetuphwirq NUMA node aware Henry Willard Orabug: 29534769 - KEYS: encrypted: fix buffer overread in validmasterdesc Eric Biggers Orabug: 29591025 CVE-2017-13305 - scsi: target: remo...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0014)

The remote OracleVM system is missing necessary patches to address critical security updates : - ibcore: initialize shpd field when allocating 'struct ibpd' Mukesh Kacker Orabug: 29384815 - Revert 'x86/apic: Make archsetuphwirq NUMA node aware' Brian Maly Orabug: 29542185 - qlcnic: fix Tx...

Information Disclosure

Linux kernel is vulnerable to information disclosure. This vulnerability exists in the Linux kernel where filesystems mounted with data=ordered mode. An attacker to read stale data from recently allocated blocks in new files after a system 'reset' by abusing ext4 mechanics of delayed allocation...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the way the Linux kernel's ext4 file system driver handled non-journal file systems with an orphan list. An attacker with physical access to the system could use this flaw to crash the system or, although unlikely, escalate their...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A NULL pointer dereference flaw was found in the way the Linux kernel's ext4 file system driver handled certain corrupted file system images. An attacker with physical access to the system could use this flaw to crash the system...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the way the Linux kernel's ext4 file system handled the page size block size condition when the fallocate zero range functionality was used. A local attacker could use this flaw to crash the system...

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way the Linux kernel's XFS file system handled replacing of remote attributes under certain conditions. A local user with access to XFS file system mount could potentially use this fla...

Privilege Escalation

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: When a set user ID setuid application is executed, certain personality flags for controlling the application's behavior are cleared that is, a privileged...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1304)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID...

EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-1302)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux kernel's ext4 filesystem code. A use-after-free is possible in ext4extremovespace function when mounting and...

Unbreakable Enterprise kernel security update

4.14.35-1844.4.5 - x86/apic/x2apic: set back affinity of a single interrupt to one cpu Mridula Shastry Orabug: 29510342 4.14.35-1844.4.4 - ext4: fix data corruption caused by unaligned direct AIO Lukas Czerner Orabug: 29598590 - swiotlb: checking whether swiotlb buffer is full with iotlbused Dong...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2019-4601)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4601 advisory. - ext4: verify the depth of extent tree in ext4findextent Theodore Ts'o Orabug: 29396714 CVE-2018-10877 CVE-2018-10877 Tenable has extracted the...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4600)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4600 advisory. - can: gw: ensure DLC boundaries after CAN frame modification Oliver Hartkopp Orabug: 29215300 CVE-2019-3701 CVE-2019-3701 - ext4: verify the depth...

Unbreakable Enterprise kernel security update

2.6.39-400.308.1 - x86/fpu: Fix 32-bit signal frame handling Dave Hansen Orabug: 28874707 - x86/fpu: Factor out memsetxstate, 0 in fpufinit paths Oleg Nesterov Orabug: 28874707 - x86/fpu: Always allow FPU in interrupt if useeagerfpu Oleg Nesterov Orabug: 28874707 - x86/fpu: Don't do threadfpuend ...

EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1220)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel. An attacker with a local account can...

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1223)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.32.1 - x86/fpu: Factor out memsetxstate, 0 in fpufinit paths Oleg Nesterov Orabug: 29012034 - x86/fpu: Always allow FPU in interrupt if useeagerfpu Oleg Nesterov Orabug: 29012034 - x86/fpu: Fix 32-bit signal frame handling Dave Hansen Orabug: 29012034 - x86/fpu: Don't do...

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1229)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic...