PT-2022-28700

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue is related to a false positive RCU usage warning in the eventfd of KVM. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-28827

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to the net sched component in the Linux Kernel. It involves adding an rcu annotation to netdev-qdisc. The actual impact and attack plausibility have not yet been proven...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ALSA-2022:0188 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfs: raw block device data leak in XFSIOCALLOCSP IOCTL CVE-2021-4155 kernel: fscontext: heap overflow in legacy parameter handling CVE-2022-0185 For more details about the security issues...

kernel security and bug fix update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfs: raw block device data leak in XFSIOCALLOCSP IOCTL CVE-2021-4155 kernel: fscontext: heap overflow in legacy parameter handling CVE-2022-0185 For more details about the security issues...

RLSA-2022:0188 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfs: raw block device data leak in XFSIOCALLOCSP IOCTL CVE-2021-4155 kernel: fscontext: heap overflow in legacy parameter handling CVE-2022-0185 For more details about the security issues...

Linux kernel has unspecified vulnerabilities (CNVD-2022-06900)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that can be exploited by an attacker to trigger a memory corruption in the Linux kernel via RCU file reference GC to trigger a denial of service and possibly run...

PT-2022-28322

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.170 Description The issue concerns the use of call rcu to free endpoint in sctp. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.14 and fixed in Linux Kern...

PT-2022-28330

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.90 Description The issue concerns the use of call rcu to free endpoint in sctp. It was introduced in version v4.14 and is fixed in Linux Kernel version v5.10.90. The actual impact and attack plausibility ha...

PT-2022-28318

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.224 Description The issue is related to the use of call rcu to free endpoint in sctp. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.14 and fixed in Linu...

PT-2022-28309

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.261 Description The issue is related to the use of call rcu to free endpoint in sctp. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue is related to the use of call rcu to free endpoint in sctp. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

GSD-2021-1002822 inet: fully convert sk->sk_rx_dst to RCU rules

inet: fully convert sk-skrxdst to RCU rules This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

PT-2021-27290

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.12 Description The issue is related to the conversion of sk-sk rx dst to RCU rules in the inet code. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-8077

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the sctp sock dump function. This vulnerability occurs when the asoc is peeled off and the old sk is freed after getting it by...

UVI-2021-1001716 net: sched: flower: protect fl_walk() with rcu

net: sched: flower: protect flwalk with rcu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

GSD-2021-1001644 net: sched: flower: protect fl_walk() with rcu

net: sched: flower: protect flwalk with rcu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

UVI-2021-1001644 net: sched: flower: protect fl_walk() with rcu

net: sched: flower: protect flwalk with rcu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...