SUSE CVE-2023-0122

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service DoS attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4...

UBUNTU-CVE-2023-0122

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service DoS attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4...

GSD-2022-1008058 nvmet: fix a memory leak

nvmet: fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.9 by commit 382fee1a8b623e2546a3e15e80517389e0e0673e, it was...

GSD-2022-1007920 nvmet: fix a memory leak

nvmet: fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.9 by commit 382fee1a8b623e2546a3e15e80517389e0e0673e, it was...

GSD-2022-1007759 nvmet: fix a memory leak

nvmet: fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.9 by commit 382fee1a8b623e2546a3e15e80517389e0e0673e, it was...

GSD-2022-1007729 nvmet: fix a memory leak in nvmet_auth_set_key

nvmet: fix a memory leak in nvmetauthsetkey This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

PT-2022-35984 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: A memory leak was discovered in the nvmet auth set key function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

GSD-2022-1007366 nvmet-tcp: add bounds check on Transfer Tag

nvmet-tcp: add bounds check on Transfer Tag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007001 nvmet-tcp: add bounds check on Transfer Tag

nvmet-tcp: add bounds check on Transfer Tag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

PT-2022-34973 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A bounds check has been added on Transfer Tag in nvmet-tcp. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-35467 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A bounds check issue was discovered in nvmet-tcp related to the Transfer Tag. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

kernel security, bug fix, and enhancement update

5.14.0-70.30.1.0.10.OL9 - lockdown: also lock down previous kgdb use Daniel Thompson Orabug: 34290418 CVE-2022-21499 5.14.0-70.30.10.OL9 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted...

GSD-2022-1006423 nvmet: fix a use-after-free

nvmet: fix a use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.213 by commit 8d66989b5f7bb28bba2f8e1e2ffc8bfef4a10717, it was...

GSD-2022-1006408 nvmet: fix a use-after-free

nvmet: fix a use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.143 by commit be01f1c988757b95f11f090a9f491365670a522b, it was...

GSD-2022-1006386 nvmet: fix a use-after-free

nvmet: fix a use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit ebf46da50beb78066674354ad650606a467e33fa, it was...

GSD-2022-1006349 nvmet: fix a use-after-free

nvmet: fix a use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit 4484ce97a78171668c402e0c45db7f760aea8060, it was...

PT-2022-6143 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions v6.0-rc1 through v6.0-rc3 Description: A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in the nvmet setup auth function, allows an attacker to perform a Pre-Auth Denial of Service DoS...

GSD-2022-1004224 nvmet-tcp: fix regression in data_digest calculation

nvmet-tcp: fix regression in datadigest calculation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.10 by commit...

GSD-2021-1000797 nvmet: fix freeing unallocated p2pmem

nvmet: fix freeing unallocated p2pmem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit 8a452d62e7cea3c8a2676a3b89a9118755a1a27...

UVI-2021-1000797 nvmet: fix freeing unallocated p2pmem

nvmet: fix freeing unallocated p2pmem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit 8a452d62e7cea3c8a2676a3b89a9118755a1a27...