AZL-31642 CVE-2023-4622 affecting package hyperv-daemons for versions less than 5.15.135.1-1

A use-after-free vulnerability in the Linux kernel's afunix component can be exploited to achieve local privilege escalation. The unixstreamsendpage function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unixstreamsendpage could...

CVE-2023-3439 affecting package hyperv-daemons for versions less than 5.15.126.1-1

CVE-2023-3439 affecting package hyperv-daemons for versions less than 5.15.126.1-1. A patched version of the package is available...

CVE-2023-0386 affecting package hyperv-daemons 5.10.185.1-1

CVE-2023-0386 affecting package hyperv-daemons 5.10.185.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-1998 affecting package hyperv-daemons 5.10.188.1-1

CVE-2023-1998 affecting package hyperv-daemons 5.10.188.1-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-38409)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38409 advisory. - An issue was discovered in setcon2fbmap in drivers/video/fbdev/core/fbcon.c in the Linux...

CVE-2023-38432 affecting package hyperv-daemons for versions less than 5.15.122.1-1

CVE-2023-38432 affecting package hyperv-daemons for versions less than 5.15.122.1-1. A patched version of the package is available...

CVE-2023-38409 affecting package hyperv-daemons for versions less than 5.15.122.1-1

CVE-2023-38409 affecting package hyperv-daemons for versions less than 5.15.122.1-1. A patched version of the package is available...

CVE-2023-1989 affecting package hyperv-daemons for versions less than 5.15.118.1-1

CVE-2023-1989 affecting package hyperv-daemons for versions less than 5.15.118.1-1. A patched version of the package is available...

CVE-2023-21102 affecting package hyperv-daemons for versions less than 5.15.118.1-1

CVE-2023-21102 affecting package hyperv-daemons for versions less than 5.15.118.1-1. A patched version of the package is available...

CVE-2023-25012 affecting package hyperv-daemons for versions less than 5.15.118.1-1

CVE-2023-25012 affecting package hyperv-daemons for versions less than 5.15.118.1-1. A patched version of the package is available...

CVE-2023-3359 affecting package hyperv-daemons for versions less than 5.15.118.1-1

CVE-2023-3359 affecting package hyperv-daemons for versions less than 5.15.118.1-1. A patched version of the package is available...

CVE-2023-1998 affecting package hyperv-daemons for versions less than 5.15.118.1-1

CVE-2023-1998 affecting package hyperv-daemons for versions less than 5.15.118.1-1. A patched version of the package is available...

AZL-33497 CVE-2023-3772 affecting package hyperv-daemons for versions less than 5.15.158.1-1

A flaw was found in the Linux kernel’s IP framework for transforming packets XFRM subsystem. This issue may allow a malicious user with CAPNETADMIN privileges to directly dereference a NULL pointer in xfrmupdateaeparams, leading to a possible kernel crash and denial of service...

AZL-33496 CVE-2023-3773 affecting package hyperv-daemons for versions less than 5.15.158.1-1

A flaw was found in the Linux kernel’s IP framework for transforming packets XFRM subsystem. This issue may allow a malicious user with CAPNETADMIN privileges to cause a 4 byte out-of-bounds read of XFRMAMTIMERTHRESH when parsing netlink attributes, leading to potential leakage of sensitive heap...

AZL-27639 CVE-2023-32257 affecting package hyperv-daemons for versions less than 5.15.145.2-1

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2SESSIONSETUP and SMB2LOGOFF commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage th...

AZL-27637 CVE-2023-33951 affecting package hyperv-daemons for versions less than 5.15.158.1-1

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

AZL-27643 CVE-2023-32247 affecting package hyperv-daemons for versions less than 5.15.145.2-1

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2SESSIONSETUP commands. The issue results from the lack of control of resource consumption. An attacker can leverage this vulnerability to create a...

AZL-27640 CVE-2023-32258 affecting package hyperv-daemons for versions less than 5.15.145.2-1

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

AZL-27638 CVE-2023-33952 affecting package hyperv-daemons for versions less than 5.15.158.1-1

A double-free vulnerability was found in handling vmwbufferobject objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to...

AZL-27635 CVE-2023-32252 affecting package hyperv-daemons for versions less than 5.15.145.2-1

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to creat...