CVE-2023-48010

CVE-2023-48010 affects STMicroelectronics SPC58 PowerPC automotive MCUs. The vulnerability arises from a missing protection mechanism for an alternate hardware interface, allowing code executing with Supervisor privileges to disable the System Memory Protection Unit and obtain unabridged read/wri...

Vulnerability of components of Linux operating systems with PowerPC/32-core processors, allowing attackers to cause system failures

The vulnerability of the powerpc/32 kernel components of the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the powerpc/pseries/iommu components in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the powerpc/pseries/iommu components in the Linux operating system is related to the dereferencing of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the powerpc/64s/interrupt components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the powerpc/64s/interrupt components in the Linux operating system’s kernel is related to errors in resource management in the exitmustharddisable function. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvmspaprtceattachiommugroup It was reported that there might be a use-after-free UAF in the kvmspaprtceattachiommugroup function. The function looks up stt from tablefd, but then continues to u...

The vulnerability of the powerpc/powernv components in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the powerpc/powernv components in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the opaleventinit function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the powerpc/powernv component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the powerpc/powernv components in the Linux operating system’s kernel is related to a memory leak in the scomdebuginitone function. Exploiting this vulnerability can allow an attacker to cause a system failure...

USN-7123-1: Linux kernel (Azure) vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain SMB messages, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service system crash or possibly expose sensitive information...

Ubuntu 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7123-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7123-1 advisory. It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain SMB messages, leading to an...

The vulnerability of the powerpc/imc-pmu components of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the powerpc/imc-pmu components of the Linux operating system’s kernel is related to the assignment of the NULL pointer in the updateeventsingroup function. Exploiting this vulnerability can allow an attacker to cause a service failure...

USN-7089-7 linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. CVE-2024-25741 Several security issues were discovered in the Linux kernel. An...

Oracle Linux 9 : edk2 (ELSA-2024-9088)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9088 advisory. - Resolves: RHEL-55336 CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks rhel-9.5 - Resolves: RHEL-21653 CVE-2023-6237 edk2:...

USN-7089-6 linux-gke vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. CVE-2024-25741 Several security issues were discovered in the Linux kernel. An...

USN-7088-5 linux-raspi, linux-raspi-5.4 vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Several security issues were discovered in the Linux kernel. An attacker could...

USN-7089-5 linux-raspi vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. CVE-2024-25741 Several security issues were discovered in the Linux kernel. An...

edk2 security update

20240524-6.0.1 - Replace upstream references Orabug:36569119 20240524-6 - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch RHEL-56974 - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch RHEL-55336 - Resolves: RHEL-56974 qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion:...

The vulnerability of the kasprintf() function in the arch/powerpc/mm/init-common.c file of the Linux kernel, related to pointer arithmetic errors, allows a malicious actor to trigger a system failure.

The vulnerability of the kasprintf function in the arch/powerpc/mm/init-common.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7089-4)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-4 advisory. Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local...

The vulnerability of the Linux operating system’s powerpc/pseries kernel components, which allows a hacker to cause a service failure

The vulnerability of the powerpc/pseries kernel components in the Linux operating system is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

USN-7100-2: Linux kernel vulnerabilities

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a deni...