SUSE SLES15: kernel-livepatch-4_12_14-150_72-default / etc (SUSE-SU-2022:0237-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0237-1 advisory. This update for the Linux Kernel 4.12.14-15072 fixes several issues. The following security issues were fixed: - CVE-2018-25020: Fixed an issue...

SUSE SLES15 Security Update : kernel (Live Patch 22 for SLE 15) (SUSE-SU-2022:0255-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0255-1 advisory. - The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instruction...

SUSE-SU-2022:0245-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15)

This update for the Linux Kernel 4.12.14-15078 fixes several issues. The following security issues were fixed: - CVE-2018-25020: Fixed an issue in the BPF subsystem in the Linux kernel mishandled situations with a long jump over an instruction sequence where inner instructions require substantial...

Important: kernel

Issue Overview: A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in the way the user calls ioctl DRMIOCTLNOUVEAUCHANNELALLOC. This flaw allows a local user to crash the system. CVE-2020-25639 An issue was discovered in the Linux kernel 3.11 through...

Medium: kernel

Issue Overview: A flaw was found in the AMD Cryptographic Co-processor driver in the Linux kernel. An attacker, able to send invalid SHA type commands, could cause the system to crash. The highest threat from this vulnerability is to system availability. CVE-2019-18808 A flaw was found in the Lin...

MGASA-2022-0021 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.15 and fixes at least the following security issues: A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS...

CVE-2021-22566

The CVE concerns the Fuchsia kernel. An incorrect setting of UXN and PXN bits in mmu_flags_to_s1_pte_attr can cause privileged executable kernel-mode pages to be mapped as executable from user mode, and unprivileged pages to be treated as executable from kernel mode. This misuse can bypass execut...

SUSE-SU-2022:0080-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2021-4083: Fixed a race condition with Unix domain socket garbage collection that can lead to read memory after free. bsc1193727 - CVE-2021-4149: Fixed an improper lock operation in btrfs which allo...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2022:0063)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0063-1 advisory. - kernel: perfeventparseaddrfilter memory CVE-2020-25704 - kernel: fuse: fusedogetattr calls makebadinode in inappropriate situations...

USN-5210-2 linux, linux-gcp, linux-gcp-5.4, linux-hwe-5.4 regression

USN-5210-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression that caused failures to boot in environments with AMD Secure Encrypted Virtualization SEV enabled. This update fixes the problem. We apologize for the inconvenience. Original advisory details:...

OPENSUSE-SU-2022:0056-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses. bsc1194094 - CVE-2021-45486: Fixed an information leak because the hash table is very...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5210-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5210-1 advisory. Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local...

devices resource list treated as a blacklist by default

Impact Contrary to the OCI runtime specification, runc's implementation of the linux.resources.devices list was a black-list by default. This means that users who created their own config.json objects and didn't prefix a deny-all rule "allow": false, "permissions": "rwm" or equivalent were not...

openSUSE 15 Security Update : kernel (openSUSE-SU-2021:3941-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3941-1 advisory. - In bpfskbchangehead of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of...

SUSE-SU-2021:3935-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can reenable v...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-5162-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5162-1 advisory. Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9564)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9564 advisory. - LTS tag: v5.4.142 Jack Vogel CVE-2021-3653 CVE-2021-3656 - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested CVE-2021-3656 Maxim Levitsky -...

SUSE-SU-2021:3723-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Real Time kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory bsc1188563. -...

RHEL 8 : kernel (RHSA-2021:4687)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4687 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in...

Oracle Linux 8 : kernel (ELSA-2021-4356)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4356 advisory. - ovl: prevent private clone if bind mount is not allowed Miklos Szeredi 1993131 CVE-2021-3732 - KVM: nSVM: avoid picking up unsupported bits from L2 i...