SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2172-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2172-1 advisory. - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection...

PT-2025-26103

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0 Description The Linux kernel has a vulnerability related to RCU priority boosting. This issue can occur in two situations: when the total number of CPUs is higher than those brought online at boot, and whe...

PT-2025-8632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where a read can race with an invalidation followed by another read, potentially replacing a folio with a higher-order folio. This can lea...

DEBIAN-CVE-2022-20153

In rcucblistdequeue of rcusegcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

CVE-2022-20141

In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

new packages: userspace-rcu

An update is available for userspace-rcu. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

PT-2022-29672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue concerns the rtw89 core txq push function, specifically its RCU usage. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions...

PT-2022-29335

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue concerns the rtw89 core txq push function, specifically its RCU usage. The actual impact and potential for attack have not been confirmed. Recommendations For Linux Kernel versions...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CLSA-2022-1650377026 Fix of CVE: CVE-2021-3609, CVE-2022-28390

can: emsusb: emsusbstartxmit: fix double devkfreeskb in error path ELSCVE-3847 CVE-2022-28390 - can: bcm: delay release of struct bcmop after synchronizercu ELSCVE-1694 CVE-2021-3609...

GSD-2022-1000569 staging: vc04_services: Fix RCU dereference check

staging: vc04services: Fix RCU dereference check This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...

GSD-2022-1000505 KVM: eventfd: Fix false positive RCU usage warning

KVM: eventfd: Fix false positive RCU usage warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000367 KVM: eventfd: Fix false positive RCU usage warning

KVM: eventfd: Fix false positive RCU usage warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.101 by commit...

PT-2022-28700

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue is related to a false positive RCU usage warning in the eventfd of KVM. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-28843

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to an RCU dereference check in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28674

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to the net sched component in the Linux Kernel. It involves adding rcu annotation to netdev-qdisc. The actual impact and attack plausibility have not yet been proven...

PT-2022-28754

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.25 Description The issue is related to an RCU dereference check in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28741

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue is related to the net sched component in the Linux Kernel. It involves adding rcu annotation to netdev-qdisc. The actual impact and attack plausibility have not yet been proven...

PT-2022-28779

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue concerns a false positive RCU usage warning in the eventfd of KVM. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-28641

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.101 Description The issue concerns a false positive RCU usage warning in the eventfd of KVM. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...