Unbreakable Enterprise kernel security update

5.4.17-2136.306.1.3 - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address Paolo Bonzini Orabug: 34053807 CVE-2022-1158 5.4.17-2136.306.1.2 - Revert 'rds/ib: recover rds connection from stuck rx path' Rohit Nair Orabug: 34045203 5.4.17-2136.306.1.1 - netfilter: nftables: initialize...

CVE-2022-25446

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the schedstarttime parameter in the openSchedWifi function...

CVE-2022-25448

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function...

CVE-2022-25447

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function...

GSD-2022-1000789 sched/fair: Fix fault in reweight_entity

sched/fair: Fix fault in reweightentity This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.27 by commit...

GSD-2022-1000720 sched/fair: Fix fault in reweight_entity

sched/fair: Fix fault in reweightentity This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.13 by commit...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

GSD-2022-1000645 net: sched: fix use-after-free in tc_new_tfilter()

net: sched: fix use-after-free in tcnewtfilter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.6 by commit...

PT-2022-7632 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15.26/5.16.12 Description: The issue is related to a race condition in the sched fork function, which can be exploited to gain elevated privileges on vulnerable systems. This occurs because a task is not place...

GSD-2022-1000164 net: sched: fix use-after-free in tc_new_tfilter()

net: sched: fix use-after-free in tcnewtfilter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.177 by commit...

PT-2022-7640 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.14 cycle Description: The issue is related to the Linux kernel's symmetric multiprocessing SMP component, specifically with the calculation of sibling and core maps. After enabling CONFIG SCHED CORE, which was...

PT-2022-7629 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a synchronization error in the reweight entity function of the Linux kernel's sched component, which can cause a null pointer dereference. This occurs due to a...

CVE-2022-24155

Tenda AX3 v16.03.12.10CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service DoS via the schedStartTime and schedEndTime parameters...

CVE-2022-24155

Tenda AX3 v16.03.12.10CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service DoS via the schedStartTime and schedEndTime parameters...

GSD-2021-1002742 net/sched: sch_ets: don't remove idle classes from the round-robin list

net/sched: schets: don't remove idle classes from the round-robin list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002698 net/sched: sch_ets: don't remove idle classes from the round-robin list

net/sched: schets: don't remove idle classes from the round-robin list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002542 net/sched: sch_ets: don't peek at classes beyond 'nbands'

net/sched: schets: don't peek at classes beyond 'nbands' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

GSD-2021-1002510 net/sched: fq_pie: prevent dismantle issue

net/sched: fqpie: prevent dismantle issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002477 net/sched: sch_ets: don't peek at classes beyond 'nbands'

net/sched: schets: don't peek at classes beyond 'nbands' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...

kernel security, bug fix, and enhancement update

4.18.0-305.25.14.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...