GSD-2023-1000162 nvme: fix SRCU protection of nvme_ns_head list

nvme: fix SRCU protection of nvmenshead list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2023-1000069 nvme: fix SRCU protection of nvme_ns_head list

nvme: fix SRCU protection of nvmenshead list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

CVE-2023-0122

CVE-2023-0122 : A NULL pointer dereference in the Linux kernel NVMe subsystem (nvmet_setup_auth()) allows a Pre-Auth Denial of Service to be launched remotely over the network. Affected versions are v6.0-rc1 through v6.0-rc3; the issue is fixed in v6.0-rc4. Root cause and impact are described in ...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a code issue vulnerability that stems from a NULL pointer dereference vulnerability in the NVMe feature located in nvmetsetupauth, which allows an...

PT-2023-33938 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to a crash caused by a flush request when blktrace is enabled, potentially affecting the nvme module. The actual impact and attack plausibility have not yet been proven...

CVE-2023-0122

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service DoS attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4...

PT-2023-34045 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the nvme-pci module in the Linux Kernel. It was introduced in version v4.18 and fixed in version v5.15.87. The actual impact and attack plausibility have not yet bee...

CVE-2023-0122

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service DoS attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4...

CVE-2023-0122

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service DoS attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4...

PT-2023-33455 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a crash caused by a flush request when blktrace is enabled, potentially affecting the nvme module. The actual impact and attack plausibility have not yet been proven...

CVE-2023-0122

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service DoS attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4...

The vulnerability of the NVME driver (drivers/nvme/target/auth.c) in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the NVME driver drivers/nvme/target/auth.c in the Linux operating system is related to the assignment of a zero pointer. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2023-1242)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Blo...

CVE-2023-0122

A NULL pointer dereference vulnerability was found in nvmetsetupauth in the Linux kernel's NVMe functionality. This issue allows an attacker to perform a Pre-Auth Denial of Service DoS attack on a remote machine...

Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2022-2925)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:4630-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:4630-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suiddumpable kernel setting bsc1205000. Bug fixes: - Support by-path devlink for multipath nvme block devices bsc1200723. - Set SYSTEMDNSSDYNAMICBYPASS=1 env var for dbus-daemon...

SUSE-SU-2022:4629-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suiddumpable kernel setting bsc1205000. Bug fixes: - Support by-path devlink for multipath nvme block devices bsc1200723...

Debian: Security Advisory (DLA-3244-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3244-1] linux-5.10 security update

Debian LTS Advisory DLA-3244-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings December 20, 2022 https://wiki.debian.org/LTS Package : linux-5.10 Version : 5.10.158-2deb10u1 CVE ID : CVE-2021-3759 CVE-2022-3169 CVE-2022-3435 CVE-2022-3521 CVE-2022-3524 CVE-2022-3564...