USN-6820-1: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6821-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6821-1 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6817-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6817-1 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereferenc...

SUSE CVE-2022-1043

A flaw was found in the Linux kernel's iouring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalate privileges...

SUSE CVE-2022-1508

An out-of-bounds read flaw was found in the Linux kernel's iouring module in the way a user triggers the ioread function with some special parameters. This flaw allows a local user to read some memory out of bounds...

SUSE CVE-2024-0582

A memory leak flaw was found in the Linux kernel's iouring functionality in how a user registers a buffer ring with IORINGREGISTERPBUFRING, mmap it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iouring: drop any code related to SCMRIGHTS CVE-2023-52656 In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section CVE-2024-26816 In the Linux kernel,...

SUSE CVE-2021-47569

In the Linux kernel, the following vulnerability has been resolved: iouring: fail cancellation for EXITING tasks WARNING: CPU: 1 PID: 20 at fs/iouring.c:6269 iotrycanceluserdata+0x3c5/0x640 fs/iouring.c:6269 CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.16.0-rc1-syzkaller 0 Workqueue: events...

SUSE CVE-2021-47504

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

The vulnerability of the io_uring subsystem in the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the iouring subsystem in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the io_uring component in the Linux operating system’s kernel, which allows a hacker to increase their privileges through the io_msg_ring() function.

The vulnerability of the iouring component in the Linux operating system’s kernel is related to the improper handling of counters in the function within the iouring/msgring.c module. This leads to the reallocation of previously freed memory. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the __io_sync Cancel() function in the io_uring/cancel.c module of the io_uring component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information, or to enhance their privileges.

The vulnerability of the iosync Cancel function in the iouring/cancel.c module of the Linux kernel’s iouring component is related to an incorrect definition of the buffer boundary. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

CVE-2021-47569

In the Linux kernel, the following vulnerability has been resolved: iouring: fail cancellation for EXITING tasks WARNING: CPU: 1 PID: 20 at fs/iouring.c:6269 iotrycanceluserdata+0x3c5/0x640 fs/iouring.c:6269 CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.16.0-rc1-syzkaller 0 Workqueue: events...

CVE-2021-47504

In the Linux kernel, the following vulnerability has been resolved: iouring: ensure taskwork gets run as part of cancelations If we successfully cancel a work item but that work item needs to be processed through taskwork, then we can be sleeping uninterruptibly in iouringcancelgeneric and never...

DEBIAN-CVE-2021-47569

In the Linux kernel, the following vulnerability has been resolved: iouring: fail cancellation for EXITING tasks WARNING: CPU: 1 PID: 20 at fs/iouring.c:6269 iotrycanceluserdata+0x3c5/0x640 fs/iouring.c:6269 CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.16.0-rc1-syzkaller 0 Workqueue: events...

CVE-2021-47569

In the Linux kernel, the following vulnerability has been resolved: iouring: fail cancellation for EXITING tasks WARNING: CPU: 1 PID: 20 at fs/iouring.c:6269 iotrycanceluserdata+0x3c5/0x640 fs/iouring.c:6269 CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.16.0-rc1-syzkaller 0 Workqueue: events...

CVE-2021-47569

In the Linux kernel, the following vulnerability has been resolved: iouring: fail cancellation for EXITING tasks WARNING: CPU: 1 PID: 20 at fs/iouring.c:6269 iotrycanceluserdata+0x3c5/0x640 fs/iouring.c:6269 CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.16.0-rc1-syzkaller 0 Workqueue: events...

CVE-2021-47504

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

DEBIAN-CVE-2021-47504

Bulletin has no description...

CVE-2021-47504

In the Linux kernel, the following vulnerability has been resolved: iouring: ensure taskwork gets run as part of cancelations If we successfully cancel a work item but that work item needs to be processed through taskwork, then we can be sleeping uninterruptibly in iouringcancelgeneric and never...