CVE-2022-47940 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-47940 affecting package hyperv-daemons for versions less than 5.15.92.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-4379 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-4379 affecting package hyperv-daemons for versions less than 5.15.92.1-1. This CVE either no longer is or was never applicable...

CVE-2022-47929 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-47929 affecting package hyperv-daemons for versions less than 5.15.92.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27666 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2022-27666 affecting package hyperv-daemons for versions less than 5.15.92.1-1. A patched version of the package is available...

CVE-2023-0266 affecting package hyperv-daemons for versions less than 5.15.92.1-1

CVE-2023-0266 affecting package hyperv-daemons for versions less than 5.15.92.1-1. An upgraded version of the package is available that resolves this issue...

AZL-34804 CVE-2023-25012 affecting package hyperv-daemons for versions less than 6.6.14.1-1

The Linux kernel through 6.1.9 has a Use-After-Free in bigbenremove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long...

AZL-26405 CVE-2023-25012 affecting package hyperv-daemons for versions less than 5.15.118.1-1

The Linux kernel through 6.1.9 has a Use-After-Free in bigbenremove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long...

AZL-13190 CVE-2023-0266 affecting package hyperv-daemons for versions less than 5.15.92.1-1

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRVCTLIOCTLELEMREAD|WRITE32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past...

CVE-2023-23454 affecting package hyperv-daemons for versions less than 5.15.87.1-1

CVE-2023-23454 affecting package hyperv-daemons for versions less than 5.15.87.1-1. An upgraded version of the package is available that resolves this issue...

AZL-13168 CVE-2023-0394 affecting package hyperv-daemons for versions less than 5.15.92.1-1

A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash...

hyperv-daemons bug fix update

An update is available for hyperv-daemons. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The hyperv-daemons packages provide a suite of daemons that are needed...

AZL-13123 CVE-2022-47929 affecting package hyperv-daemons for versions less than 5.15.92.1-1

In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service system crash via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdiscgraft in...

GSD-2023-1001357 x86/hyperv: Remove unregister syscore call from Hyper-V cleanup

x86/hyperv: Remove unregister syscore call from Hyper-V cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000610 x86/hyperv: Remove unregister syscore call from Hyper-V cleanup

x86/hyperv: Remove unregister syscore call from Hyper-V cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

hyperv-daemons bug fix update

An update is available for hyperv-daemons. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The hyperv-daemons packages provide a suite of daemons that are needed...

AZL-13049 CVE-2023-23454 affecting package hyperv-daemons for versions less than 5.15.87.1-1

cbqclassify in net/sched/schcbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service slab-out-of-bounds read because of type confusion non-negative numbers can sometimes indicate a TCACTSHOT condition rather than valid classification results...

AZL-12931 CVE-2022-47940 affecting package hyperv-daemons for versions less than 5.15.92.1-1

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2write...

AZL-11608 CVE-2022-3107 affecting package kernel for versions less than 5.15.86.1-1

An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarray and will cause the null pointer dereference...

DEBIAN-CVE-2022-3107

An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarray and will cause the null pointer dereference...

Null pointer dereference

An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarray and will cause the null pointer dereference...