AZL-40481 CVE-2024-26961 affecting package hyperv-daemons for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154llseckeydel mac802154llseckeydel can free resources of a key directly without following the RCU rules for waiting before the end of a grace period. This may lead to...

AZL-40509 CVE-2024-26953 affecting package hyperv-daemons for versions less than 5.15.158.2-1

In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from pagepool When the skb is reorganized during espoutput !esp-inline, the pages coming from the original skb fragments are supposed to be released back to the system through putpage. But if t...

AZL-40497 CVE-2024-26951 affecting package hyperv-daemons for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check for dangling peer via isdead instead of empty list If all peers are removed via wgpeerremoveall, rather than setting peerlist to empty, the peer is added to a temporary list with a head on the stack of...

CVE-2023-52447 affecting package hyperv-daemons for versions less than 5.15.153.1-1

CVE-2023-52447 affecting package hyperv-daemons for versions less than 5.15.153.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-0565 affecting package hyperv-daemons for versions less than 5.15.153.1-1

CVE-2024-0565 affecting package hyperv-daemons for versions less than 5.15.153.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-26594 affecting package hyperv-daemons for versions less than 5.15.153.1-1

CVE-2024-26594 affecting package hyperv-daemons for versions less than 5.15.153.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-26581 affecting package hyperv-daemons for versions less than 5.15.153.1-1

CVE-2024-26581 affecting package hyperv-daemons for versions less than 5.15.153.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-26583 affecting package hyperv-daemons for versions less than 6.6.22.1-2

CVE-2024-26583 affecting package hyperv-daemons for versions less than 6.6.22.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-1151 affecting package hyperv-daemons for versions less than 6.6.22.1-2

CVE-2024-1151 affecting package hyperv-daemons for versions less than 6.6.22.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-26581 affecting package hyperv-daemons for versions less than 6.6.22.1-2

CVE-2024-26581 affecting package hyperv-daemons for versions less than 6.6.22.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2023-25012 affecting package hyperv-daemons for versions less than 6.6.14.1-1

CVE-2023-25012 affecting package hyperv-daemons for versions less than 6.6.14.1-1. A patched version of the package is available...

AZL-35478 CVE-2023-51779 affecting package hyperv-daemons for versions less than 6.6.29.1-1

btsockrecvmsg in net/bluetooth/afbluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a btsockioctl race condition...

AZL-40024 CVE-2024-26602 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on sysmembarrier On some systems, sysmembarrier can be very expensive, causing overall slowdowns for everything. So put a lock on the path in order to serialize the accesses to preve...

AZL-35452 CVE-2024-26594 affecting package hyperv-daemons for versions less than 5.15.153.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid...

AZL-35474 CVE-2024-26583 affecting package hyperv-daemons for versions less than 6.6.22.1-2

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread one which called recvmsg/sendmsg may exit as soon as the async crypto handler calls complete so any code past that point risks touching already freed data...

AZL-35475 CVE-2024-26581 affecting package hyperv-daemons for versions less than 6.6.22.1-2

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active...

AZL-35451 CVE-2024-26581 affecting package hyperv-daemons for versions less than 5.15.153.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active...

AZL-35476 CVE-2023-52429 affecting package hyperv-daemons for versions less than 6.6.22.1-2

dmtablecreate in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to in alloctargets allocate more than INTMAX bytes, and crash, because of a missing check for struct dmioctl.targetcount...

AZL-35477 CVE-2024-1151 affecting package hyperv-daemons for versions less than 6.6.22.1-2

A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result,...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2023-51780)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-51780 advisory. - An issue was discovered in the Linux kernel before 6.6.8. dovccioctl in net/atm/ioctl.c has a...