CVE-2024-56665 bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog

In the Linux kernel, the following vulnerability has been resolved: bpf,perf: Fix invalid progarray access in perfeventdetachbpfprog Syzbot reported 1 crash that happens for following tracing scenario: - create tracepoint perf event with attr.inherit=1, attach it to the process and set bpf progra...

USN-7166-3 linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - ACPI...

USN-7166-2 linux-aws, linux-aws-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - ACPI...

USN-7166-1 linux, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - ACPI...

JDK: Array indexing integer overflow (8328544)

Vulnerability in Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and 23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java...

The vulnerability of the powerpc/perf components in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the powerpc/perf components in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the perf/x86/intel/pt components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the perf/x86/intel/pt components in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-36975

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to an invalid access to prog array in perf event detach bpf prog. A crash occurs when a tracepoint perf event with attr.inherit=1 is created, attached to a process, and a b...

The vulnerability of the Linux operating system’s kernel component “perf”, which allows a hacker to trigger a service failure

The vulnerability of the perf component in the Linux operating system’s kernel is related to errors in resource management functions such as pmusbictrstart and pmusbictrstop. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: i915/perf: Fix NULL deref bugs with drm_dbg() calls

In the Linux kernel, the following vulnerability has been resolved: i915/perf: Fix NULL deref bugs with drmdbg calls When i915 perf interface is not available dereferencing it will lead to NULL dereferences. As returning -ENOTSUPP is pretty clear return when perf interface is not available...

Unbreakable Enterprise kernel security update

5.15.0-302.167.6 - ice: Add a per-VF limit on number of FDIR filters Ahmed Zaki Orabug: 36964088 CVE-2024-42291 - scsi: lpfc: Fix a possible null pointer dereference Huai-Yuan Liu Orabug: 36964437 CVE-2024-43821 - power: reset: pwr-mlxbf: support graceful shutdown Asmaa Mnebhi Orabug: 37208029 -...

The vulnerability of the Linux operating system’s kernel component “perf”, which allows a hacker to trigger a service failure

The vulnerability of the perf component in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the stmmac component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the perf component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the stmmacfpestopwq function. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the perf bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the perf bpf component in the Linux operating system’s kernel is related to resource management errors in the perfenvinsertbpfproginfo function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005549 fixes several issues. The following security issues were fixed: CVE-2024-35905: Fixed int overflow for stack access size bsc1226327. CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. CVE-2024-35863: Fixed potential UAF i...

ROS-20241025-01

A vulnerability in the netlink component of the Linux kernel is related to the use of an uninitialized resource in the sizeof function in lib/nlattr.c. uninitialized resource in the sizeof function in lib/nlattr.c. Exploitation of the vulnerability could allow an attacker to cause a denial of...

ROS-20241024-03

Vulnerability of idxd components of the Linux operating system kernel is related to resource management errors in the idxdcleanupinternals and idxdinitevl functions in drivers/dma/idxd/init.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability i...

SUSE CVE-2022-48950

In the Linux kernel, the following vulnerability has been resolved: perf: Fix perfpendingtask UaF Per syzbot it is possible for perfpendingtask to run after the event is free'd. There are two related but distinct cases: - the taskwork was already queued before destroying the event; - destroying t...

SUSE CVE-2024-50012

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Avoid a bad reference count on CPU node In the parseperfdomain function, if the call to ofparsephandlewithargs returns an error, then the reference to the CPU device node that was acquired at the start of the function...

DEBIAN-CVE-2022-48950

In the Linux kernel, the following vulnerability has been resolved: perf: Fix perfpendingtask UaF Per syzbot it is possible for perfpendingtask to run after the event is free'd. There are two related but distinct cases: - the taskwork was already queued before destroying the event; - destroying t...