Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6231-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6231-1 advisory. It was discovered that the XFS file system implementation in the Linux kernel did not properly perform metadata validation when mounting certain images. ...

SUSE-SU-2023:2859-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1077: Fixed a type confusion in picknextrtentity, that could cause memory corruption bsc1208600. - CVE-2023-1249: Fixed a use-after-free flaw in the cor...

USN-6231-1: Linux kernel (OEM) vulnerabilities

It was discovered that the XFS file system implementation in the Linux kernel did not properly perform metadata validation when mounting certain images. An attacker could use this to specially craft a file system image that, when mounted, could cause a denial of service system crash. CVE-2023-212...

SUSE-SU-2023:2831-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1077: Fixed a type confusion in picknextrtentity, that could cause memory corruption bsc1208600. - CVE-2023-1249: Fixed a use-after-free flaw in t...

SUSE-SU-2023:2830-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asuskbdbacklightset when plugging/disconnecting a malicious USB device bsc1208604...

Unbreakable Enterprise kernel security update

5.4.17-2136.321.4 - tick/common: Align tick period during schedtimer setup Thomas Gleixner Orabug: 35520079 - net/rds: Fix endless rdssendxmit loop if cpindex 0 Gerd Rausch Orabug: 35510149 5.4.17-2136.321.3 - selinux: don't use make's grouped targets feature yet Paul Moore - lib: cpurmap: Fix...

CVE-2023-35315

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability...

CVE-2023-35315

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability...

CVE-2023-35315

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability...

CVE-2023-32037

Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability...

CVE-2023-32037

Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability...

Information disclosure

Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability...

Remote code execution

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability...

CVE-2023-35315 Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

...

CVE-2023-35315 Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

...

CVE-2023-32037 Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability

...

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

...

PT-2023-3874 · Microsoft · Windows Layer-2 Bridge Network Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Layer-2 Bridge network driver, allowing remote attackers to execute arbitrary code and...

PT-2023-3832 · Microsoft · Windows Layer-2 Bridge Network Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver affected versions not specified Description: The issue is related to a network driver in the Windows operating system, specifically the Layer-2 Bridge, and involves the disclosure of information...

CVE-2023-3090

A flaw was found in the IPVLAN network driver in the Linux kernel. This issue is caused by missing skb-cb initialization in ipoptionsecho and can lead to an out-of-bounds write stack overflow. This may allow a local user to cause a denial of service or potentially achieve local privilege...