CVE-2024-27046

CVE-2024-27046 is a Linux kernel vulnerability affecting the nfp: flower path. The issue occurs when kmalloc_array() in nfp_fl_lag_do_work() returns NULL under memory pressure, which can lead to a NULL pointer dereference when accessing acti_netdevs. The accompanying patch adds a check for alloca...

CVE-2024-27046

In the Linux kernel, the following vulnerability has been resolved: nfp: flower: handle actinetdevs allocation failure The kmallocarray in nfpfllagdowork will return null, if the physical memory has run out. As a result, if we dereference the actinetdevs, the null pointer dereference bugs will...

CVE-2024-27046 nfp: flower: handle acti_netdevs allocation failure

In the Linux kernel, the following vulnerability has been resolved: nfp: flower: handle actinetdevs allocation failure The kmallocarray in nfpfllagdowork will return null, if the physical memory has run out. As a result, if we dereference the actinetdevs, the null pointer dereference bugs will...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.2 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.2 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security...

kernel: nfp: use-after-free in area_cache_get()

A vulnerability was found in areacacheget in drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c in the Netronome Flow Processor NFP driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue...

kernel security update

4.18.0-513.18.0.19.OL8 - drivers: net: slip: fix NPD bug in sltxtimeout CVE-2022-41858 - nfp: fix use-after-free in areacacheget CVE-2022-3545 - HID: check empty reportlist in hidvalidatevalues CVE-2023-1073 - Fix double fget in vhostnetsetbackend CVE-2023-1838 - can: afcan: fix NULL pointer...

kernel security update

5.14.0-362.18.0.13.OL9 - nfp: fix use-after-free in areacacheget Jialiang Wang CVE-2022-3545 - drivers: net: slip: fix NPD bug in sltxtimeout Duoming Zhou CVE-2022-41858 - can: afcan: fix NULL pointer dereference in canrcvfilter Oliver Hartkopp CVE-2023-2166 - RDMA/core: Fix resolvepreparesrc...

kernel: nfp: use-after-free in area_cache_get()

A vulnerability was found in areacacheget in drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c in the Netronome Flow Processor NFP driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue...

com.infomaximum:network (>=1.1.3p8 <=1.1.3p10), com.infomaximum:platform (>=0.1.6p17 <=0.1.13p1) +11 more potentially affected by CVE-2023-36478 via org.eclipse.jetty.http3:http3-qpack (>=11.0.10 <=11.0.15)

org.eclipse.jetty.http3:http3-qpack MAVEN version =11.0.10, =1.1.3p8, =0.1.6p17, =0.2.0, =0.2.0, =0.2.0, =11.0.10, =11.0.10, =11.0.10, =11.0.10, =11.0.10, =11.0.10, =11.0.10, =11.0.15 Source cves: CVE-2023-36478 Source advisory: OSV:GHSA-WGH7-54F2-X98R...

CLSA-2023-1683146027 kernel: Fix of 23 CVEs

media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...

[Important] [Security] Virtuozzo ReadyKernel Patch 155.1 for Virtuozzo Hybrid Server 7.5

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5. Vulnerability id: CVE-2022-3564 3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4 A Bluetooth use-after-free in the Bluetooth...

Use After Free

linux is vulnerable to Use After Free. The function areacacheget of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c of the component IPsec contains the use after free vulnerability...

SUSE CVE-2019-19080

Four memory leaks in the nfpflowerspawnphyreprs function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to cause a denial of service memory consumption, aka CID-8572cea1461a...

SUSE CVE-2019-19081

A memory leak in the nfpflowerspawnvnicreprs function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service memory consumption, aka CID-8ce39eb5a67a...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.316.7 - runtime revert of virtionet: Stripe queue affinities across cores. Konrad Rzeszutek Wilk Orabug: 35001045 5.4.17-2136.316.6 - block: Change the granularity of io ticks from ms to ns Gulam Mohamed Orabug: 34780807 - powercap: intelrapl: support new layout of Psys PowerLimit...

CVE-2022-3545

A vulnerability was found in areacacheget in drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c in the Netronome Flow Processor NFP driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue. Mitigation This flaw can be mitigated by preventing the...

Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free

...

AZL-11136 CVE-2022-3545 affecting package kernel for versions less than 5.15.86.1-1

A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function areacacheget of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a...