2678 matches found
kernel security update
5.14.0-611.5.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 248176...
Linux kernel io_uring Heap Buffer Overflow DoS
The vulnerability of the ioruntaskwork function in the iouring/iouring.h header file of the Linux kernel’s asynchronous input/output interface relates to operations involving resources after their expiration. Exploiting this vulnerability can allow an attacker to cause a service failure...
SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP7) (SUSE-SU-2025:4056-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4056-1 advisory. This update for the Linux Kernel 6.4.0-15070051 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a nu...
Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2023-46862)
An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an iouring/fdinfo.c iouringshowfdinfo NULL pointer dereference can occur. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990849)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990849 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring/rw: fix missing NOWAIT check for ODIRECT start write When iouring starts a write, it'll...
RHEL 9 : kernel (RHSA-2025:20518)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:20518 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN...
SUSE-SU-2025:4056-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-15070051 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38511: drm/xe/pf: Clear all LMTT pages on alloc bsc1248176. - CVE-2025-38617: net/packe...
kernel: io_uring: check if we need to reschedule during overflow flush
A flaw was found in the Linux kernel. A local attacker with low privileges could trigger a denial of service DoS in the iouring subsystem. By generating a large number of overflow entries, the attacker could cause a prolonged flush operation, making the system unresponsive...
kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time
No description is available for this CVE...
kernel: io_uring: check if iowq is killed before queuing
In the Linux kernel, the following vulnerability has been resolved: iouring: check if iowq is killed before queuing task work can be executed after the task has gone through iouring termination, whether it's the final taskwork run or the fallback path. In this case, task work will find -iowq bein...
kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
A flaw was found in the Linux kernel's iouring subsystem. A local user with administrative privileges can cause a Denial of Service DoS by triggering a system deadlock. This issue occurs when direct input/output I/O write requests are processed during an active filesystem freeze without verifying...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
kernel: io_uring/sqpoll: zero sqd->thread on tctx errors
No description is available for this CVE...
kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time
No description is available for this CVE...
kernel: io_uring: prevent opcode speculation
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...
kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
In the Linux kernel, the following vulnerability has been resolved: iouring/eventfd: ensure ioeventfdsignal defers another RCU period ioeventfddosignal is invoked from an RCU callback, but when dropping the reference to the ioevfd, it calls ioeventfdfree directly if the refcount drops to zero. Th...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...
SUSE-SU-2025:4001-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700533 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38511: drm/xe/pf: Clear all LMTT pages on alloc bsc1248176. - CVE-2025-38617:...
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700533 fixes several issues. The following security issues were fixed: CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. CVE-2025-38511: drm/xe/pf: Clear all LMTT pages on alloc bsc1248176. CVE-2025-38617: net/packet: fi...