Azure Linux 3.0 Security Update: kernel (CVE-2024-56776)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56776 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of...

Azure Linux 3.0 Security Update: kernel (CVE-2024-45003)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45003 advisory. - In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode l...

Ubuntu: Security Advisory (USN-6316-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-35479 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.232 Description: The issue is related to a wrong-direction WARNING in the plusb.c file, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2023-35156 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: A potential issue exists in the Linux Kernel, specifically in the sch taprio component of the net/sched module. The problem may lead to a use-after-free scenario. The actual impact and...

PT-2023-35034 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.0 through v6.1.7 Description: A null-deref issue was found in the gsmi get variable function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.0 through...

PT-2023-34854 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: A null pointer dereference issue occurs when the host dies, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2023-34154 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a possible null pointer dereference in the cxl guest init afu|adapter function. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2023-33078 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue is related to a fix for preallocation discarding at indirect extent boundary. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33262 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A potential issue has been identified in the Linux Kernel, related to a possible use after free in the e100 xmit prepare function. The actual impact and attack plausibility have not yet bee...

PT-2023-33862 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns a slot type check in the check stack write var off function. It was introduced in version v5.12 and fixed in version v6.0.16. The actual impact and attack plausibility hav...

PT-2023-33324 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves re-fetching the skb cb after tipc msg validate. The actual impact and attack plausibility have n...

PT-2023-33501 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to the VF promisc mode not being updated when the mac table is full. This problem was introduced in version v5.14 and is fixed in Linux Kernel version v6.0.19. The actua...

PT-2023-33362 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.227 Description: The issue is related to the invocation of MMU notifiers in shmem/file collapse paths in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-33273 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.161 Description: The issue is related to a fix for preallocation discarding at indirect extent boundary. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2023-34002 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: A use-after-free UAF issue was discovered in the clone dtr function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.4 and is fix...

PT-2023-33615 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to conflicts with built-in functions in bpf iter ksym. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2023-34254 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue concerns a slot type check in the check stack write var off function. It was introduced in version v5.12 and fixed in version v5.15.86. The actual impact and attack plausibility...

PT-2022-36254 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: The issue is related to the release of a flow rule object from the commit path in nf tables. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-36097 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to a use-after-free in the l2cap conn del function. This problem was introduced in version v5.19 and is fixed in Linux Kernel version v6.0.8. The actual impact and attack...