Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.2 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

GSD-2023-1001282 powerpc/rtas: avoid device tree lookups in rtas_os_term()

powerpc/rtas: avoid device tree lookups in rtasosterm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000920 powerpc/rtas: avoid device tree lookups in rtas_os_term()

powerpc/rtas: avoid device tree lookups in rtasosterm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000462 powerpc/rtas: avoid device tree lookups in rtas_os_term()

powerpc/rtas: avoid device tree lookups in rtasosterm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

PT-2023-33997

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.87 Description The issue is related to device tree lookups in the rtas os term function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-33485 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A bug was found in the es tree search function related to a bad quota inode, which may potentially lead to security issues. The actual impact and attack plausibility have not yet been proven...

PT-2023-34324

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A bug was found in the es tree search function of the ext4 file system, potentially caused by a bad boot loader inode. The actual impact and attack plausibility have not yet been proven...

PT-2023-34326

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A bug was found in the es tree search function related to a bad quota inode, which may potentially lead to security issues. The actual impact and attack plausibility have not yet been proven...

PT-2023-33956

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description A bug was found in the es tree search function of the ext4 file system, potentially caused by a bad boot loader inode. The actual impact and attack plausibility have not yet been proven...

PT-2023-34359

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to device tree lookups in the rtas os term function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2023-33539

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.17 Description The issue is related to device tree lookups in the rtas os term function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-33959

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description A bug was found in the es tree search function related to a bad quota inode, which may potentially lead to security issues. The actual impact and attack plausibility have not yet been proven...

PT-2023-34604

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description A bug was found in the es tree search function, caused by a bad boot loader inode. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux...

Prototype Pollution

tree-kit is vulnerable to prototype pollution. The vulnerability exists in the op function of browser/tree-kit.js, due to the improper checks for the key variable which allows an attacker to modify object prototype attributes...

PT-2023-9448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to a panic condition in the Linux kernel when the extent tree is not created. This issue can lead to a denial of service. The vulnerability is associated wit...

CVE-2022-47952

lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace path" often indicates...

Path traversal

lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace path" often indicates...

PT-2025-37547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Btrfs file system relocation roots. A race condition between quota tree creation and relocation can lead to duplicated quota trees and a...

PT-2025-54126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when tree connecting to the Inter-Process Communication IPC. Access to TCP Server Info::hostname is not adequately protected when building the IPC tree name,...

PT-2025-49747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s overlay functionality where a call to of changeset init occurs prematurely. Specifically, if of overlay fdt apply fails, a partial state may remain,...