MiracleLinux 7 : kernel-3.10.0-1160.119.1.0.8.el7.AXS7 (AXSA:2025-9625:10)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9625:10 advisory. media: edia: dvbdev: fix a use-after-free CVE-2024-27043 btrfs: dev-replace: properly validate device names CVE-2024-26791 KVM: nSVM: Ignore nCR34:0...

Linux Distros Unpatched Vulnerability : CVE-2022-50274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: dvbdev: adopts refcnt to avoid UAF dvbunregisterdevice is known that prone to use-after-free. That is, the cleanup from dvbunregisterdevice releases the...

CVE-2022-50274: Use After Free

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: adopts refcnt to avoid UAF dvbunregisterdevice is known that prone to use-after-free. That is, the cleanup from dvbunregisterdevice releases the dvbdevice even if there are pointers stored in file-privatedata still...

Moderate: Red Hat Security Advisory: kernel:4.18.0 security update

An update for the kernel:4.18.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

AZL-53840 CVE-2024-53063 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIGDVBDYNAMICMINORS is set or not. When not set, dvbregisterdevice won't che...

CVE-2024-53063: Improper Handling of Exceptional Conditions

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIGDVBDYNAMICMINORS is set or not. When not set, dvbregisterdevice won't che...

PT-2024-35527

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the media: dvbdev component in the Linux kernel, where a static variable is used to store dvb minors. The behavior depends on whether CONFIG DVB DYNAMIC MINORS is set ...

UBUNTU-CVE-2024-27043

In the Linux kernel, the following vulnerability has been resolved: media: edia: dvbdev: fix a use-after-free In dvbregisterdevice, pdvbdev is set equal to dvbdev, which is freed in several error-handling paths. However, pdvbdev is not set to NULL after dvbdev's deallocation, causing...

CVE-2024-27043 media: edia: dvbdev: fix a use-after-free

In the Linux kernel, the following vulnerability has been resolved: media: edia: dvbdev: fix a use-after-free In dvbregisterdevice, pdvbdev is set equal to dvbdev, which is freed in several error-handling paths. However, pdvbdev is not set to NULL after dvbdev's deallocation, causing...

CVE-2020-36777: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: Fix memory leak in dvbmediadevicefree dvbmediadevicefree is leaking memory. Free dvbdev-adapter-conn before setting it to NULL, as documented in include/media/media-device.h: "The mediaentity instance itself must b...

PT-2023-33602

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A refcnt bug was discovered in the media: dvbdev component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v6.0.16, upda...

PT-2023-33630

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A potential issue exists where the media: dvbdev: adopts refcnt to avoid UAF. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2023-34068

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A potential issue exists where the media: dvbdev: adopts refcnt to avoid UAF. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2023-34049

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A refcnt bug was discovered in the media: dvbdev component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.86,...

PT-2023-34387

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a build warning caused by comments in the media: dvbdev component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2023-34386

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A refcnt bug was discovered in the media: dvbdev component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.163,...

PT-2023-34050

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a build warning due to comments in the media: dvbdev component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-33603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a build warning due to comments in the media: dvbdev component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...