UBUNTU-CVE-2021-47537

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix a memleak bug in rvumboxinit In rvumboxinit, mboxregions is not freed or passed out under the switch-default region, which could lead to a memory leak. Fix this bug by changing 'return err' to 'goto freeregions'...

UBUNTU-CVE-2021-47542

In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings In qlcnic83xxaddrings, the indirect function of ahw-hwops-allocmbxargs will be called to allocate memory for cmd.req.arg, and there is a dereference of it ...

UBUNTU-CVE-2021-47528

In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: Fix a NULL pointer dereference in cdnspendpointinit In cdnspendpointinit, cdnspringalloc is assigned to pep-ring and there is a dereference of it in cdnspendpointinit, which could lead to a NULL pointer dereference on...

UBUNTU-CVE-2021-47541

In the Linux kernel, the following vulnerability has been resolved: net/mlx4en: Fix an use-after-free bug in mlx4entryallocresources In mlx4entryallocresources, mlx4encopypriv is called and tmp-txcq will be freed on the error path of mlx4encopypriv. After that mlx4enallocresources is called and...

CVE-2021-47541

In the Linux kernel, the following vulnerability has been resolved: net/mlx4en: Fix an use-after-free bug in mlx4entryallocresources In mlx4entryallocresources, mlx4encopypriv is called and tmp-txcq will be freed on the error path of mlx4encopypriv. After that mlx4enallocresources is called and...

CVE-2021-47542 net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()

In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings In qlcnic83xxaddrings, the indirect function of ahw-hwops-allocmbxargs will be called to allocate memory for cmd.req.arg, and there is a dereference of it ...

CVE-2021-47542

CVE-2021-47542 affects the Linux kernel’s qlcnic logic for certain 83xx devices. In function qlcnic_83xx_add_rings() , the indirect call through ahw->hw_ops->alloc_mbx_args() can return NULL on allocation failure, and the code could dereference this NULL pointer. The patch adds a guard to v...

CVE-2021-47541 net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()

In the Linux kernel, the following vulnerability has been resolved: net/mlx4en: Fix an use-after-free bug in mlx4entryallocresources In mlx4entryallocresources, mlx4encopypriv is called and tmp-txcq will be freed on the error path of mlx4encopypriv. After that mlx4enallocresources is called and...

CVE-2021-47541

CVE-2021-47541 targets the Linux kernel mlx4_en driver. In mlx4_en_try_alloc_resources(), mlx4_en_copy_priv() may free tmp->tx_cq on the error path, and later mlx4_en_alloc_resources() dereferences &tmp->tx_cq[t][i], risking a use-after-free. The fix adds a guard/check around mlx4_en_copy_p...

CVE-2021-47537 octeontx2-af: Fix a memleak bug in rvu_mbox_init()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix a memleak bug in rvumboxinit In rvumboxinit, mboxregions is not freed or passed out under the switch-default region, which could lead to a memory leak. Fix this bug by changing 'return err' to 'goto freeregions'...

CVE-2021-47537

CVE-2021-47537 affects the Linux kernel in the octeontx2-af component, where in rvu_mbox_init() the mbox_regions pointer could be leaked on the switch-default path. The bug was a memory leak due to not freeing or returning the regions, and it is fixed by replacing a plain return err with a goto f...

CVE-2021-47537 octeontx2-af: Fix a memleak bug in rvu_mbox_init()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix a memleak bug in rvumboxinit In rvumboxinit, mboxregions is not freed or passed out under the switch-default region, which could lead to a memory leak. Fix this bug by changing 'return err' to 'goto freeregions'...

CVE-2021-47528 usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()

In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: Fix a NULL pointer dereference in cdnspendpointinit In cdnspendpointinit, cdnspringalloc is assigned to pep-ring and there is a dereference of it in cdnspendpointinit, which could lead to a NULL pointer dereference on...

CVE-2021-47528 usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()

In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: Fix a NULL pointer dereference in cdnspendpointinit In cdnspendpointinit, cdnspringalloc is assigned to pep-ring and there is a dereference of it in cdnspendpointinit, which could lead to a NULL pointer dereference on...

CVE-2021-47528

CVE-2021-47528 in the Linux kernel USB CDNSP code fixes a NULL pointer dereference in cdnsp_endpoint_init() by adding a check for pep->ring after cdnsp_ring_alloc() (previously dereferenced on potential failure). The vulnerability could occur when cdnsp_ring_alloc() fails and pep->ring is N...

CVE-2023-52855

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency In dwc2hcdurbenqueue, "urb-hcpriv = NULL" is executed without holding the lock "hsotg-lock". In dwc2hcdurbdequeue: spinlockirqsave&hsotg-;lock, flags;...

Apache Tomcat 8.0.0.RC1 < 8.0.44

The version of Tomcat installed on the remote host is prior to 8.0.44. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat8.0.44security-8 advisory. - The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error pag...

Apache Tomcat 9.0.0.M1 < 9.0.0.M21

The version of Tomcat installed on the remote host is prior to 9.0.0.M21. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.0.m21security-9 advisory. - The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an err...

libssh security update

0.9.6-14 - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol BPP - Fix CVE-2023-6918 Missing checks for return values for digests - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection of malicious code through hostname - Note: version is bumped from 12 to 14...

Apache Tomcat 7.0.0 < 7.0.78

The version of Tomcat installed on the remote host is prior to 7.0.78. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat7.0.78security-7 advisory. - The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error pag...