kernel: ice: xsk: disable txq irq before flushing hw

In the Linux kernel, the following vulnerability has been resolved: ice: xsk: disable txq irq before flushing hw iceqpdis intends to stop a given queue pair that is a target of xsk pool attach/detach. One of the steps is to disable interrupts on these queues. It currently is broken in a way that...

Rocky Linux 9 : kernel (RLSA-2023:0334)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0334 advisory. - A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of...

Rocky Linux 9 : kernel-rt (RLSA-2023:0300)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0300 advisory. - A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of...

Rocky Linux 8 : kernel (RLSA-2023:0101)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0101 advisory. - A flaw was found in the Linux kernel's driver for the ASIX AX88179178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple...

Rocky Linux 8 : kernel-rt (RLSA-2023:0114)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0114 advisory. - A flaw was found in the Linux kernel's driver for the ASIX AX88179178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple...

SUSE: Security Advisory (SUSE-SU-2023:4185-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:4184-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4184-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-34323: Fixed a potential crash in C Xenstored due to an incorrect assertion XSA-440 bsc1215744. - CVE-2023-34326: Fixed a missing IOMMU TLB flush on x86 AMD systems with IOMMU hardware and PCI passthrough enabled XSA-442 bsc1215746. -...

LSN-0098-1: Kernel Live Patch Security Notice

It was discovered that the IP-VLAN network driver for the Linux kernel did not properly initialize memory in some situations, leading to an out-of- bounds write vulnerability. An attacker could use this to cause a denial of service system crash or possibly execute arbitrary code.CVE-2023-3090 It...

Vulnerabilities of functions nftFlushTable(), nfTablesDelChain(), nfTablesNewRule(), nfTablesDelRule(), and __nftReleaseTable() in Linux kernel, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information, or enhance their privileges.

The vulnerabilities of the functions nftFlushTable, nfTablesDelChain, nfTablesNewRule, nfTablesDelRule, and nftReleaseTable in the Linux kernel are related to the reutilization of previously freed memory. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality,...

DEBIAN-CVE-2023-41000

GPAC through 2.2.1 has a use-after-free vulnerability in the function gfbifsflushcommandlist in bifs/memorydecoder.c...

PT-2023-9370

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.3 Description The issue is related to a use-after-free bug in the Linux kernel. This bug occurs because the original code puts flush work before timer shutdown sync in switch drv remove, allowing the worker t...

The vulnerability of the nft_set_catchallFlush() function in the net/netfilter/nf_tables_api.c module of the Linux kernel’s netfilter component allows a attacker to access protected information or cause a service failure.

The vulnerability of the nftsetcatchallFlush function in the net/netfilter/nftablesapi.c module of the Linux kernel’s netfilter component is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to access protected information or cause...

Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c

...

USN-6330-1: Linux kernel (GCP) vulnerabilities

Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 Tavis Ormandy discovered that some AMD processors...

USN-6316-1 linux-oem-6.1 vulnerabilities

Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 Tavis Ormandy discovered that some AMD processors...

DEBIAN-CVE-2023-4569

A memory leak flaw was found in nftsetcatchallflush in net/netfilter/nftablesapi.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak...

PT-2023-4716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak flaw was found in the nft set catchall flush function in the net/netfilter/nf tables api.c component of the Linux kernel. This issue may allow a local attacker to cause...

PT-2025-37652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference issue was identified in the r5l flush stripe to raid function within the md/raid5-cache module of the Linux kernel. The issue occurs because the flushing ios...

kernel: net: macvlan: fix memory leaks of macvlan_common_newlink

In the Linux kernel, the following vulnerability has been resolved: net: macvlan: fix memory leaks of macvlancommonnewlink kmemleak reports memory leaks in macvlancommonnewlink, as follows: ip link add link eth0 name .. type macvlan mode source macaddr add kmemleak reports: unreferenced object...