2641 matches found
RHEL 9 : kernel (RHSA-2025:21933)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21933 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: e1000e: fix heap overflow in...
AlmaLinux 9 : kernel (ALSA-2025:20518)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:20518 advisory. kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB...
kernel: io_uring/waitid: always prune wait queue entry in io_waitid_wait()
A flaw use after free in the Linux kernel IOURING subsystem was found in the way local user uses iouring interface using IORINGOPWAITID. A local user could use this flaw to crash the system or potentially escalate their privileges on the system...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
RHEL 9 : kernel (RHSA-2025:21469)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21469 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86/hyper-v: Skip...
The vulnerability of the io_run_task_work() function in the io_uring/io_uring.h module of the Linux kernel’s asynchronous input/output interface allows a attacker to cause a service failure.
The vulnerability of the ioruntaskwork function in the iouring/iouring.h header file of the Linux kernel’s asynchronous input/output interface relates to operations involving resources after their expiration. Exploiting this vulnerability can allow an attacker to cause a service failure...
SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP7) (SUSE-SU-2025:4056-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4056-1 advisory. This update for the Linux Kernel 6.4.0-15070051 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a nu...
Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2023-46862)
An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an iouring/fdinfo.c iouringshowfdinfo NULL pointer dereference can occur. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
RHEL 9 : kernel (RHSA-2025:20518)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:20518 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990849)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990849 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring/rw: fix missing NOWAIT check for ODIRECT start write When iouring starts a write, it'll...
SUSE-SU-2025:4056-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-15070051 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38511: drm/xe/pf: Clear all LMTT pages on alloc bsc1248176. - CVE-2025-38617: net/packe...
kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
A flaw was found in the Linux kernel's iouring subsystem. A local user with administrative privileges can cause a Denial of Service DoS by triggering a system deadlock. This issue occurs when direct input/output I/O write requests are processed during an active filesystem freeze without verifying...
kernel: io_uring: check if iowq is killed before queuing
In the Linux kernel, the following vulnerability has been resolved: iouring: check if iowq is killed before queuing task work can be executed after the task has gone through iouring termination, whether it's the final taskwork run or the fallback path. In this case, task work will find -iowq bein...
kernel: io_uring: check if we need to reschedule during overflow flush
A flaw was found in the Linux kernel. A local attacker with low privileges could trigger a denial of service DoS in the iouring subsystem. By generating a large number of overflow entries, the attacker could cause a prolonged flush operation, making the system unresponsive...
kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time
No description is available for this CVE...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
In the Linux kernel, the following vulnerability has been resolved: iouring/eventfd: ensure ioeventfdsignal defers another RCU period ioeventfddosignal is invoked from an RCU callback, but when dropping the reference to the ioevfd, it calls ioeventfdfree directly if the refcount drops to zero. Th...
kernel: io_uring/sqpoll: zero sqd->thread on tctx errors
No description is available for this CVE...
kernel: io_uring: prevent opcode speculation
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...