RLSA-2021:2714 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sizet-to-int conversion vulnerability in the filesystem layer CVE-2021-33909 kernel: race condition for removal of the HCI controller CVE-2021-32399 For more details about the security...

Unbreakable Enterprise kernel security update

4.1.12-124.45.6 - qla2xxx: disable target reset during link reset and update version Quinn Tran Orabug: 32095664 - scsi: qla2xxx: Fix early srb free on abort Quinn Tran Orabug: 32095664 - scsi: qla2xxx: Fix comment in MODULEPARMDESC in qla2xxx Masanari Iida Orabug: 32095664 - scsi: qla2xxx: Enabl...

Privilege Escalation

The kernel packages is vulnerable to Privilege Escalation. The RHBA-2008:0314 update introduced NPort ID Virtualization NPIV support in the qla2xxx driver, resulting in two new sysfs pseudo files, "/sys/class/scsihost/a qla2xxx host/vportcreate" and "vportdelete". These two files were...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 7 : kernel (RHSA-2020:1266)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1266 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: heap overflow in mwifiexupdatevsie...

Oracle: Security Advisory (ELSA-2009-1243)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...

CVE-2009-3556

A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...

CVE-2009-3556

The CVE-2009-3556 issue is confirmed in multiple connected sources: a Red Hat qla2xxx NPIV-related configuration step in the Linux kernel (2.6.18 on RHEL5) leaves /sys/class/scsi_host/vport_create and /sys/class/scsi_host/vport_delete world-writable, enabling local users to alter SCSI host attrib...

Red Hat Linux Kernel qla2xxx驱动完全可写文件漏洞

BUGTRAQ ID: 37876 CVE ID: CVE-2009-3556 Linux Kernel是开放源码操作系统Linux所使用的内核。 对于使用qla2xxx驱动且支持NPIV硬件的Red Hat版本的Linux Kernel系统，驱动向SCSI主机属性中添加了两个新的sysfs伪文件： w--w--w- root root /sys/class/scsihost/host1/vportcreate w--w--w- root root /sys/class/scsihost/host1/vportdelete w--w--w- root root...

Red Hat Linux内核'qla2xxx'驱动安全绕过漏洞

Bugraq ID: 37876 CVE ID：CVE-2009-3556 Red Hat是一款流行的Linux发行版本。 qla2xxx驱动支持NPort ID Virtualization NPIV，它增加了两个新的sysfs pseudo文件:"/sys/class/scsihost/a qla2xxx host/vportcreate"和"vportdelete"，这两个文件默认全局可写，允许本地用户更改SCSI主机属性。 此漏洞仅影响使用qla2xxx驱动和NPIV硬件。 RedHat Enterprise Linux EUS 5.4.z server RedHat...

kernel security and bug fix update

2.6.18-164.11.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug...