Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:0198-1 Rating: important References: 1065729 1071995 1154353 1154492 1156395 1167773 1176447 1176774 1177437 1190256 1191271 1191929 1192931 1193255 1193328 1193660 1193669 1193727 1193901 1193927...

SUSE-SU-2022:0181-1 Security update for the Linux Kernel

The SUSE MicroOS 5.0 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4001: Fixed a race condition when the EBPF map is frozen. bsc1192990 - CVE-2021-4002: Added a missing TLB flush that could lead to leak or corruption of data in...

OPENSUSE-SU-2022:0169-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0185: Incorrect param length parsing in legacyparseparam which could have led to a local privilege escalation bsc1194517. - CVE-2022-0322: Fixed a...

[SECURITY] Fedora 34 Update: kernel-5.15.16-100.fc34

The kernel meta package...

MGASA-2022-0026 Updated kernel packages fix security vulnerability

This kernel update is based on upstream 5.15.16 and fixes at least the following security issue: William Liu and Jamie Hill-Daniel discovered that the file system context functionality in the Linux kernel contained an integer underflow vulnerability, leading to an out-of-bounds write. A local...

Updated kernel packages fix security vulnerability

This kernel update is based on upstream 5.15.16 and fixes at least the following security issue: William Liu and Jamie Hill-Daniel discovered that the file system context functionality in the Linux kernel contained an integer underflow vulnerability, leading to an out-of-bounds write. A local...

kernel security and bug fix update

4.18.0-348.12.25.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security and bug fix update

An update for kernel is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

SUSE-SU-2022:0131-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can reenable via systemctl setting /proc/sys/kernel/unprivilegedbpfdisabled to 0...

MGASA-2022-0022 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.15 and fixes at least the following security issues: A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.15 and fixes at least the following security issues: A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS...

CVE-2021-22566

An incorrect setting of UXN bits within mmuflagstos1pteattr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits...

Code injection

An incorrect setting of UXN bits within mmuflagstos1pteattr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits...

CVE-2021-22566 Incorrect mapping of Executable bits in Fuchsia Kernel

An incorrect setting of UXN bits within mmuflagstos1pteattr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits...

PT-2022-9253 · Google · Fuchsia

Name of the Vulnerable Software and Affected Versions: Fuchsia kernel versions prior to commit 7d731b4e9599088ac3073956933559da7bca6a00 Description: An incorrect setting of UXN bits within mmu flags to s1 pte attr leads to privileged executable pages being mapped as executable from an unprivilege...

[SECURITY] Fedora 35 Update: kernel-5.15.14-200.fc35

The kernel meta package...

SUSE-SU-2022:0079-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-24504: Fixed an uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers that may have allowed an authenticated user to...

SUSE-SU-2022:0068-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. bsc1167162 - CVE-2021-33098: Fixed a potential denial of service in IntelR Ethernet...

CVE-2021-4204

An out-of-bounds OOB memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information. Mitigation The default Red Hat Enterprise Linux kernel prevents unprivileg...

SUSE-SU-2022:0056-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses. bsc1194094 - CVE-2021-45486: Fixed an information leak because the hash table is very...