3411 matches found
USN-8096-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...
USN-8096-1 linux, linux-aws, linux-gcp, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-xilinx-zynqmp vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...
MINI-6PPC-98F6-FGF2
Bulletin has no description...
The vulnerability of the iommu_init_early_dart() function in the arch/powerpc/sysdev/dart_iommu.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the iommuinitearlydart function in the arch/powerpc/sysdev/dartiommu.c module of the PowerPC platform support for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow an attacker to cause a system failure...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005626)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005626 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/52xx: Fix a resource leak in an error handling path The error handling path of...
USN-8074-2: Linux kernel (Azure FIPS) vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-005652)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005652 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/52xx: Fix a resource leak in an error handling path The error handling path of...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005731)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005731 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtasosterm It's unsafe to use rtasbusydelay to handle a busy...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-005619)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005619 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtasosterm It's unsafe to use rtasbusydelay to handle a busy...
The vulnerability of the rtas_os_term() function in the arch/powerpc/kernel/rtas.c module of the PowerPC platform’s Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rtasosterm function in the arch/powerpc/kernel/rtas.c module of the PowerPC platform support for the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the iommudebugfs_add() function in the arch/powerpc/kernel/iommu.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the iommudebugfsadd function in the arch/powerpc/kernel/iommu.c module, which is part of the PowerPC platform support for the Linux operating system, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...
The vulnerability of the xive_irq_bitmap_add() function in the arch/powerpc/sysdev/xive/spapr.c module of the PowerPC platform supports for the Linux operating system allows a hacker to gain unauthorized access to protected information or cause a service failure.
The vulnerability of the xiveirqbitmapadd function in the arch/powerpc/sysdev/xive/spapr.c module of the PowerPC platform’s Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
The vulnerability of the icp_opal_init() function in the arch/powerpc/sysdev/xics/icp-opal.c module of the PowerPC platform allows a hacker to cause a service failure.
The vulnerability of the icpopalinit function in the arch/powerpc/sysdev/xics/icp-opal.c module of the PowerPC platform in the Linux operating system is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...
Informix-INFORMIXDIR-bof-exploit
informix-informixdir-bof A root shell exploit for a stack-bas...
The vulnerability of the enter_rtas() function in the arch/powerpc/kernel/rtas_entry.S module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the enterrtas function in the arch/powerpc/kernel/rtasentry.S module of the Linux operating system’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
USN-8028-6 linux-hwe-6.8, linux-lowlatency-hwe-6.8 vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...
USN-8031-2: Linux kernel (GCP FIPS) vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...
USN-8031-1: Linux kernel (GCP) vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...
ROS-20260211-73-0009
A vulnerability in the arch/powerpc/platforms/powernv/memtrace.c module of the Linux operating system kernel is related to a violation of the initial buffer boundary. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Siemens SCALANCE and RUGGEDCOM Covert Timing Channel (CVE-2025-27587)
OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVPDigestSign API, and then using the private key to extract the K value nonce from the signatures. Next, based on the bit size of t...