UVI-2021-1001283 f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances

f2fs: fix to avoid racing on fsyncentryslab by multi filesystem instances This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.51 by commit...

UVI-2021-1001208 f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances

f2fs: fix to avoid racing on fsyncentryslab by multi filesystem instances This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.3 by commit...

GSD-2021-1001208 f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances

f2fs: fix to avoid racing on fsyncentryslab by multi filesystem instances This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.3 by commit...

USN-5016-1 linux, linux-aws, linux-aws-5.8, linux-azure, linux-azure-5.8, linux-gcp, linux-gcp-5.8, linux-hwe-5.8, linux-kvm, linux-oracle, linux-oracle-5.8, linux-raspi vulnerabilities

It was discovered that the virtual file system implementation in the Linux kernel contained an unsigned to signed integer conversion error. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-33909 Or Cohen and Nadav Markus discovered a...

Debian DLA-2690-1 : linux-4.19 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service, or information leaks. CVE-2020-24586, CVE-2020-24587, CVE-2020-26147 Mathy Vanhoef discovered that many Wi-Fi implementations, including...

USN-5001-1: Linux kernel (OEM) vulnerabilities

Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. CVE-2021-3609 Mathy Vanhoef discovered that the Linux kernel’s WiFi implementati...

Ubuntu 21.04 : Linux kernel vulnerabilities (USN-4997-1)

The remote Ubuntu 21.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4997-1 advisory. Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A loc...

GSD-2021-1000337 f2fs: fix panic during f2fs_resize_fs()

f2fs: fix panic during f2fsresizefs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit 1c20a4896409f5ca1c770e1880c33d0a28a8b10f,...

GSD-2021-1000197 f2fs: compress: fix race condition of overwrite vs truncate

f2fs: compress: fix race condition of overwrite vs truncate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000197 f2fs: compress: fix race condition of overwrite vs truncate

f2fs: compress: fix race condition of overwrite vs truncate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

GSD-2021-1000336 f2fs: fix to avoid touching checkpointed data in get_victim()

f2fs: fix to avoid touching checkpointed data in getvictim This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

UVI-2021-1000218 f2fs: fix to avoid touching checkpointed data in get_victim()

f2fs: fix to avoid touching checkpointed data in getvictim This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

GSD-2021-1000222 f2fs: fix panic during f2fs_resize_fs()

f2fs: fix panic during f2fsresizefs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit 822054e5026c43b1dd60cf387dd999e95ee2ecc2, ...

UVI-2021-1000222 f2fs: fix panic during f2fs_resize_fs()

f2fs: fix panic during f2fsresizefs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit 822054e5026c43b1dd60cf387dd999e95ee2ecc2, ...

UVI-2021-1000336 f2fs: fix to avoid touching checkpointed data in get_victim()

f2fs: fix to avoid touching checkpointed data in getvictim This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

UVI-2021-1000337 f2fs: fix panic during f2fs_resize_fs()

f2fs: fix panic during f2fsresizefs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit 1c20a4896409f5ca1c770e1880c33d0a28a8b10f,...

GSD-2021-1000218 f2fs: fix to avoid touching checkpointed data in get_victim()

f2fs: fix to avoid touching checkpointed data in getvictim This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000316 f2fs: compress: fix race condition of overwrite vs truncate

f2fs: compress: fix race condition of overwrite vs truncate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

GSD-2021-1000316 f2fs: compress: fix race condition of overwrite vs truncate

f2fs: compress: fix race condition of overwrite vs truncate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.37 and fixes at least the following security issues: It was discovered that the iouring implementation of the Linux kernel did not properly enforce the MAXRWCOUNT limit in some situations. A local attacker could use this to cause a denial of...