GSD-2022-1002709 tty: fix deadlock caused by calling printk() under tty_port->lock

tty: fix deadlock caused by calling printk under ttyport-lock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-32150

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description A potential issue exists due to a deadlock caused by calling printk under tty port-lock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32266

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description A potential issue exists due to a deadlock caused by calling printk under tty port-lock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32027

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A potential issue exists due to a deadlock caused by calling printk under tty port-lock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31681

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to the printk function in the Linux Kernel, specifically concerning wake waiters for safe and NMI contexts. The actual impact and attack plausibility have not yet been...

PT-2022-32325

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A potential issue exists due to a deadlock caused by calling printk under tty port-lock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31597

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A potential issue exists due to a deadlock caused by calling printk under tty port-lock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31402

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the printk function in the Linux Kernel, specifically concerning wake waiters for safe and NMI contexts. The actual impact and attack plausibility have not yet been...

PT-2022-31840

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A potential issue exists due to a deadlock caused by calling printk under tty port-lock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31302

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential issue exists due to a deadlock caused by calling printk under tty port-lock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31055

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the printk function in the Linux Kernel, specifically concerning wake waiters for safe and NMI contexts. The actual impact and attack plausibility have not yet been...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.306.1.3 - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address Paolo Bonzini Orabug: 34053807 CVE-2022-1158 5.4.17-2136.306.1.2 - Revert 'rds/ib: recover rds connection from stuck rx path' Rohit Nair Orabug: 34045203 5.4.17-2136.306.1.1 - netfilter: nftables: initialize...

Unbreakable Enterprise kernel security update

5.4.17-2136.306.1.3 - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address Paolo Bonzini Orabug: 34053807 CVE-2022-1158 5.4.17-2136.306.1.2 - Revert 'rds/ib: recover rds connection from stuck rx path' Rohit Nair Orabug: 34045203 5.4.17-2136.306.1.1 - netfilter: nftables: initialize...

kernel security, bug fix, and enhancement update

4.18.0-240.OL8 - Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 =...

CVE-2018-7273

In the Linux kernel, through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

Unbreakable Enterprise kernel security update

4.1.12-124.35.1 - ixgbe: protect TX timestamping from API misuse Manjunath Patil Orabug: 30275491 - block: init flush rq ref count to 1 Josef Bacik Orabug: 30360559 - block: fix null pointer dereference in blkmqrqtimedout Yufen Yu Orabug: 30360559 - blk-mq: Remove generation seqeunce Keith Busch...

Arbitrary Code Execution

kernel-rt is vulnerable to arbitrary code execution. The vulnerability exists through a format string attack in the input of printk...

CVE-2018-5995

The pcpuembedfirstchunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "pages/cpu" printk call...

Design/Logic Flaw

The pcpuembedfirstchunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "pages/cpu" printk call...

CVE-2018-5953

The swiotlbprintinfo function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "software IO TLB" printk call...