CVE-2021-47049

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in vmbusopen The "openinfo" variable is added to the &vmbusconnection.chnmsglist, but the error handling frees "openinfo" without removing it from the list. This will result in a use after free...

AZL-40024 CVE-2024-26602 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on sysmembarrier On some systems, sysmembarrier can be very expensive, causing overall slowdowns for everything. So put a lock on the path in order to serialize the accesses to preve...

AZL-35452 CVE-2024-26594 affecting package hyperv-daemons for versions less than 5.15.153.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid...

AZL-35474 CVE-2024-26583 affecting package hyperv-daemons for versions less than 6.6.22.1-2

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread one which called recvmsg/sendmsg may exit as soon as the async crypto handler calls complete so any code past that point risks touching already freed data...

AZL-35451 CVE-2024-26581 affecting package hyperv-daemons for versions less than 5.15.153.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active...

AZL-35475 CVE-2024-26581 affecting package hyperv-daemons for versions less than 6.6.22.1-2

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active...

AZL-35476 CVE-2023-52429 affecting package hyperv-daemons for versions less than 6.6.22.1-2

dmtablecreate in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to in alloctargets allocate more than INTMAX bytes, and crash, because of a missing check for struct dmioctl.targetcount...

AZL-35477 CVE-2024-1151 affecting package hyperv-daemons for versions less than 6.6.22.1-2

A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result,...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2023-51780)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-51780 advisory. - An issue was discovered in the Linux kernel before 6.6.8. dovccioctl in net/atm/ioctl.c has a...

CVE-2023-5972 affecting package hyperv-daemons for versions less than 5.15.143.1-1

CVE-2023-5972 affecting package hyperv-daemons for versions less than 5.15.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-1193 affecting package hyperv-daemons for versions less than 5.15.145.2-1

CVE-2023-1193 affecting package hyperv-daemons for versions less than 5.15.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-32254 affecting package hyperv-daemons for versions less than 5.15.145.2-1

CVE-2023-32254 affecting package hyperv-daemons for versions less than 5.15.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-51780 affecting package hyperv-daemons for versions less than 5.15.145.2-1

CVE-2023-51780 affecting package hyperv-daemons for versions less than 5.15.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-32258 affecting package hyperv-daemons for versions less than 5.15.145.2-1

CVE-2023-32258 affecting package hyperv-daemons for versions less than 5.15.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-32252 affecting package hyperv-daemons for versions less than 5.15.145.2-1

CVE-2023-32252 affecting package hyperv-daemons for versions less than 5.15.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-6111 affecting package hyperv-daemons for versions less than 5.15.143.1-1

CVE-2023-6111 affecting package hyperv-daemons for versions less than 5.15.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-6121 affecting package hyperv-daemons for versions less than 5.15.145.2-1

CVE-2023-6121 affecting package hyperv-daemons for versions less than 5.15.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-32257 affecting package hyperv-daemons for versions less than 5.15.145.2-1

CVE-2023-32257 affecting package hyperv-daemons for versions less than 5.15.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-32247 affecting package hyperv-daemons for versions less than 5.15.145.2-1

CVE-2023-32247 affecting package hyperv-daemons for versions less than 5.15.145.2-1. An upgraded version of the package is available that resolves this issue...

AZL-34273 CVE-2024-0565 affecting package hyperv-daemons for versions less than 5.15.153.1-1

An out-of-bounds memory read flaw was found in receiveencryptedstandard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service...