GSD-2023-1000842 MIPS: vpe-mt: fix possible memory leak while module exiting

MIPS: vpe-mt: fix possible memory leak while module exiting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000840 MIPS: vpe-cmp: fix possible memory leak while module exiting

MIPS: vpe-cmp: fix possible memory leak while module exiting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-34306 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to the use of kzalloc too early in the mips: ralink: mt7621 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33935

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the use of kzalloc too early in the mips: ralink: mt7621 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

unicorn:fuzz_emu_mips_32le: Segv on unknown address in helper_tlbwr_mipsel

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=4952044001951744 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32le Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

unicorn:fuzz_emu_mips_32be: Index-out-of-bounds in helper_extpdp_mips

Detailed Report: https://oss-fuzz.com/testcase?key=6676879774187520 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32be Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: helperextpdpmips Sanitizer: undefined UBSAN...

binutils:fuzz_addr2line: Heap-use-after-free in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5896738160902144 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzaddr2line Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x61100000007c Crash State: bfdgetl16 bfdmipselfgenericreloc...

binutils:fuzz_addr2line: Heap-use-after-free in _bfd_mips_elf_generic_reloc

Detailed Report: https://oss-fuzz.com/testcase?key=4911146922803200 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzaddr2line Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62100002a3b0 Crash State: bfdmipselfgenericreloc...

Mageia: Security Advisory (MGASA-2022-0440)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

unicorn:fuzz_emu_mips_32le: Index-out-of-bounds in mipsdsp_sat32_acc_q31

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5269576915222528 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32le Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...

unicorn:fuzz_emu_mips_32be: Index-out-of-bounds in mipsdsp_rndrashift_short_acc

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5934566332563456 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32be Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...

Warning: New RapperBot Campaign Aims to Launch DDoS Attacks at Game Servers

Cybersecurity researchers have unearthed new samples of malware called RapperBot that are being used to build a botnet capable of launching Distributed Denial of Service DDoS attacks against game servers. "In fact, it turns out that this campaign is less like RapperBot than an older campaign that...

Unbreakable Enterprise kernel security update

4.14.35-2047.519.2.1 - xfs: trim IO to found COW extent limit Eric Sandeen Orabug: 34765284 - xfs: don't use delalloc extents for COW on files with extsize hints Christoph Hellwig Orabug: 34765284 4.14.35-2047.519.2 - Revert 'xfs: don't use delalloc extents for COW on files with extsize hints'...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.519.2.1.el7 - xfs: trim IO to found COW extent limit Eric Sandeen Orabug: 34765284 - xfs: don't use delalloc extents for COW on files with extsize hints Christoph Hellwig Orabug: 34765284 4.14.35-2047.519.2 - Revert 'xfs: don't use delalloc extents for COW on files with extsize hints...

GSD-2022-1007299 MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()

MIPS: SGI-IP27: Fix platform-device leak in bridgeplatformcreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

GSD-2022-1007113 MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()

MIPS: SGI-IP27: Fix platform-device leak in bridgeplatformcreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006871 MIPS: SGI-IP30: Fix platform-device leak in bridge_platform_create()

MIPS: SGI-IP30: Fix platform-device leak in bridgeplatformcreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006870 MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()

MIPS: SGI-IP27: Fix platform-device leak in bridgeplatformcreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

Unbreakable Enterprise kernel security update

5.4.17-2136.311.6 - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' Sherry Yang Orabug: 34535896 5.4.17-2136.311.5 - netfilter: nftables: do not allow RULEID to refer to another chain Thadeu Lima de Souza Cascardo Orabug: 34495567 CVE-2022-2586 - netfilter: nftable...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.311.6 - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' Sherry Yang Orabug: 34535896 5.4.17-2136.311.5 - netfilter: nftables: do not allow RULEID to refer to another chain Thadeu Lima de Souza Cascardo Orabug: 34495567 CVE-2022-2586 - netfilter: nftable...