Unbreakable Enterprise kernel-container security update

5.4.17-2136.307.3.1 - Revert 'rds/ib: recover rds connection from stuck tx path' Nagappan Ramasamy Palaniappan Orabug: 34124233 5.4.17-2136.307.3 - kvm: debugfs: fix memory leak in kvmcreatevmdebugfs Pavel Skripkin Orabug: 33099019 - KVM: debugfs: Reuse binary stats descriptors Jing Zhang Orabug:...

MariaDB 10.6.0 < 10.6.8 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.6.8 advisory. - MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component...

MariaDB 10.5.0 < 10.5.16 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.5.16. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.5.16 advisory. - MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component...

GSD-2022-1001530 powerpc/64s: Don't use DSISR for SLB faults

powerpc/64s: Don't use DSISR for SLB faults This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001214 powerpc/64s: Don't use DSISR for SLB faults

powerpc/64s: Don't use DSISR for SLB faults This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-30118

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.15.32 Description The issue concerns the use of DSISR for SLB faults on powerpc/64s. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.5 throu...

PT-2022-29753

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to non-access data TLB cache flush faults in the parisc component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29803

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.16.18 Description The issue is related to the use of DSISR for SLB faults on powerpc/64s. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.5...

PT-2022-29487

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.17.1 Description The issue concerns the use of DSISR for SLB faults on powerpc/64s. It was introduced in version v5.5 and fixed in version v5.17.2. The actual impact and attack plausibility have not yet be...

PT-2022-29426

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to non-access data TLB cache flush faults in the parisc component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

CLSA-2022-1650576075 Fix of 13 CVEs

CKSIX-267: USB: hso: Fix OOB memory access in hsoprobe/hsogetconfigdata - CKSIX-267: CVE-2019-14615: drm/i915/gen9: Clear residual context state on context switch - CKSIX-267: CVE-2020-8647, CVE-2020-8649: vgacon: Fix a UAF in vgaconinvertregion - CKSIX-267: CVE-2020-14331: vgacon: Fix for...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists because subsequent DMA or interrupts from the device may have unpredictable behaviour, ranging from IOMMU faults to memory corruption which may lead to an application crash...

CVE-2022-26361

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

CVE-2022-26359

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

DEBIAN-CVE-2022-26360

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

ALPINE-CVE-2022-26360

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

ALPINE-CVE-2022-26359

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

ALPINE-CVE-2022-26358

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

ALPINE-CVE-2022-26361

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

CVE-2022-26358

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...