EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1236)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Linux kernel is vulnerable to a NULL pointer dereference in the ext4/xattr.c:ext4xattrinodehash function. An attacker could tric...

Unbreakable Enterprise kernel security update

4.1.12-124.26.7 - ibcore: initialize shpd field when allocating 'struct ibpd' Mukesh Kacker Orabug: 29384815 - Revert 'x86/apic: Make archsetuphwirq NUMA node aware' Brian Maly Orabug: 29542185 - qlcnic: fix Tx descriptor corruption on 82xx devices Shahed Shaikh Orabug: 27708787 - block: Fix a ra...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0011)

The remote OracleVM system is missing necessary patches to address critical security updates : - scsi: scsitransportiscsi: modify detected conn err to KERNERR Fred Herard Orabug: 29487790 - xen/blkfront: avoid NULL blkfrontinfo dereference on device removal Vasilis Liaskovitis Orabug: 29469740 -...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4594)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4594 advisory. - ext4: always verify the magic number in xattr blocks Theodore Ts'o Orabug: 29437127 CVE-2018-10879 CVE-2018-10879 - ext4: add corruption check in...

Unbreakable Enterprise kernel security update

4.1.12-124.26.5 - scsi: scsitransportiscsi: modify detected conn err to KERNERR Fred Herard Orabug: 29487790 - xen/blkfront: avoid NULL blkfrontinfo dereference on device removal Vasilis Liaskovitis Orabug: 29469740 4.1.12-124.26.4U - bnxten: Fix race conditions in .ndogetstats64. Michael Chan...

EulerOS 2.0 SP3 : kernel (EulerOS-SA-2019-1108)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was discovered in the Linux kernel's USB subsystem in the usbgetextradescriptor function in the drivers/usb/core/usb.c which mishandles a...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0009)

The remote OracleVM system is missing necessary patches to address critical security updates : - NFS: commit direct writes even if they fail partially J. Bruce Fields Orabug: 28212440 - rds: update correct congestion map for loopback transport Mukesh Kacker Orabug: 29175685 - ext4: only look at t...

Moderate: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4576)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4576 advisory. - alarmtimer: Prevent overflow for relative nanosleep Thomas Gleixner Orabug: 29269167 CVE-2018-13053 - KEYS: Don't permit requestkey to construct ...

The vulnerability of the jbd2_journal_dirtymetadata() function in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the jbd2journaldirtymetadata function in the Linux kernel is related to data writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to trigger a service failure by manipulating a specially created ext4 file system image...

The vulnerability of the ext4_init_block_bitmap() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the ext4initblockbitmap function in the Linux operating system is related to writing data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created ext4 file system image...

The vulnerability of the ext4_updateInline_data() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4updateInlinedata function in the Linux operating system is related to writing data beyond the buffer boundaries on the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created instance of the ext4 file system...

A vulnerability in the transaction.c file of the Linux operating system’s kernel allows a hacker to trigger a service failure or increase their privileges.

The vulnerability in the transaction.c file of the Linux operating system is related to writing data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges by using a specially created ext4 file system image...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4575)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4575 advisory. - ext4: only look at the bgflags field if it is valid Theodore Tso Orabug: 29316684 CVE-2018-10876 CVE-2018-10876 - net: Set skprotcreator when...

The vulnerability of the ext4_extDropRefs() function in the Linux operating system allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the ext4extDropRefs function in the Linux operating system relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code using a specially created ext4 file system image...

The vulnerability of the ext4_extremove_space() function in the Linux operating system allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the ext4extremovespace function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code using a specially created ext4 file system imag...

Unbreakable Enterprise kernel security update

2.6.39-400.307.1 - proc: restrict kernel stack dumps to root John Donnelly Orabug: 29114880 CVE-2018-17972 - alarmtimer: Prevent overflow for relative nanosleep Thomas Gleixner Orabug: 29269182 CVE-2018-13053 - ext4: only look at the bgflags field if it is valid Theodore Ts'o Orabug: 29409428...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.31.1 - alarmtimer: Prevent overflow for relative nanosleep Thomas Gleixner Orabug: 29269167 CVE-2018-13053 - KEYS: Don't permit requestkey to construct a new keyring David Howells Orabug: 29304552 CVE-2017-17807 - KEYS: add missing permission check for requestkey destination...

Unbreakable Enterprise kernel security update

4.1.12-124.26.1 - NFS: commit direct writes even if they fail partially J. Bruce Fields Orabug: 28212440 - rds: update correct congestion map for loopback transport Mukesh Kacker Orabug: 29175685 - ext4: only look at the bgflags field if it is valid Theodore Tso Orabug: 29316684 CVE-2018-10876...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1028)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified oth...