USN-5018-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the virtual file system implementation in the Linux kernel contained an unsigned to signed integer conversion error. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-33909 Piotr Krysiuk discovered that the eBPF...

USN-5000-1: Linux kernel vulnerabilities | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute...

UVI-2021-1000964 IB/mlx5: Fix initializing CQ fragments buffer

IB/mlx5: Fix initializing CQ fragments buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

GSD-2021-1000964 IB/mlx5: Fix initializing CQ fragments buffer

IB/mlx5: Fix initializing CQ fragments buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000904 IB/mlx5: Fix initializing CQ fragments buffer

IB/mlx5: Fix initializing CQ fragments buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...

GSD-2021-1000904 IB/mlx5: Fix initializing CQ fragments buffer

IB/mlx5: Fix initializing CQ fragments buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...

UVI-2021-1000881 IB/mlx5: Fix initializing CQ fragments buffer

IB/mlx5: Fix initializing CQ fragments buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.195 by commit...

PT-2021-29507

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.17 through 5.12.10 Description The issue is related to the initialization of CQ fragments buffer in IB/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-29429

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.17 through 5.10.43 Description The issue is related to the initialization of CQ fragments buffer in IB/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-29369

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.17 through 5.4.125 Description The issue is related to the initialization of CQ fragments buffer in IB/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-25435

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.17 through 5.10.43 Description: The issue is related to the initialization of CQ fragments buffer in IB/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2021-25375

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.17 through 5.4.125 Description: The issue is related to the initialization of CQ fragments buffer in IB/mlx5. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2021-29346

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.17 through 4.19.194 Description The issue concerns the initialization of CQ fragments buffer in IB/mlx5. It was introduced in version v4.17 and fixed in version v4.19.195. The actual impact and attack plausibility have...

PT-2021-25352

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.17 through 4.19.194 Description: The issue concerns the initialization of CQ fragments buffer in IB/mlx5. It is noted that the actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

ALSA-2021:2570 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in net/bluetooth/hcievent.c when destroying an hcichan CVE-2021-33034 kernel: security bypass in certs/blacklist.c and certs/systemkeyring.c CVE-2020-26541 For more details...

USN-5000-2 linux-kvm vulnerabilities

USN-5000-1 fixed vulnerabilities in the Linux kernel for Ubuntu 20.04 LTS and the Linux HWE kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux KVM kernel for Ubuntu 20.04 LTS. Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of...

USN-5000-2: Linux kernel (KVM) vulnerabilities

USN-5000-1 fixed vulnerabilities in the Linux kernel for Ubuntu 20.04 LTS and the Linux HWE kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux KVM kernel for Ubuntu 20.04 LTS. Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of...

USN-5001-1: Linux kernel (OEM) vulnerabilities

Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. CVE-2021-3609 Mathy Vanhoef discovered that the Linux kernel’s WiFi implementati...

SUSE SLES15: kernel-azure / kernel-azure-devel / kernel-devel-azure / etc (SUSE-SU-2021:1975-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1975-1 advisory. The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...