CVE-2024-50017 x86/mm/ident_map: Use gbpages only where full GB page should be mapped.

In the Linux kernel, the following vulnerability has been resolved: x86/mm/identmap: Use gbpages only where full GB page should be mapped. When identpudinit uses only GB pages to create identity maps, large ranges of addresses not actually requested can be included in the resulting table; a 4K...

libuv: Improper Domain Lookup that potentially leads to SSRF attacks

A server-side request forgery SSRF flaw was found in the libuv package due to how the hostnameascii variable is handled in uvgetaddrinfo and uvidnatoascii. When the hostname exceeds 256 characters, it gets truncated without a terminating null byte. As a result, attackers may be able to access...

SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:3564-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3564-1 advisory. The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were...

SUSE-SU-2024:3564-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52610: net/sched: actct: fix skb leak and crash on ooo frags bsc1221610. - CVE-2023-52752: smb: client: fix use-after-free bug in cifsdebugdataprocshow...

GHSA-VR26-JCQ5-FJJ8 vulnerabilities

Vulnerabilities for packages: wasmcloud, uv, wash, pixi, qdrant...

GHSA-VR26-JCQ5-FJJ8 vulnerabilities

Vulnerabilities for packages: pixi, wasmcloud, uv, qdrant, wash...

CVE-2024-45311 vulnerabilities

Vulnerabilities for packages: pixi, wasmcloud, uv, qdrant, wash...

CVE-2024-43832

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call foliowaitwriteback without a folio reference foliowaitwriteback requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed...

SUSE CVE-2024-43832

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call foliowaitwriteback without a folio reference foliowaitwriteback requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed...

CVE-2024-43832

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call foliowaitwriteback without a folio reference foliowaitwriteback requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed...

DEBIAN-CVE-2024-43832

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call foliowaitwriteback without a folio reference foliowaitwriteback requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed...

CVE-2024-43832

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call foliowaitwriteback without a folio reference foliowaitwriteback requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed...

CVE-2024-43832 s390/uv: Don't call folio_wait_writeback() without a folio reference

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call foliowaitwriteback without a folio reference foliowaitwriteback requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed...

CVE-2024-43832

In CVE-2024-43832, the issue is in the Linux kernel's s390/uv path where folio_wait_writeback() could be called without a folio reference after PTL removal, risking use-after-free if a folio is freed concurrently. The root cause is that folio_wait_writeback() requires both no held spinlocks and a...

CVE-2024-43832

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call foliowaitwriteback without a folio reference foliowaitwriteback requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed...

CVE-2024-43832 s390/uv: Don't call folio_wait_writeback() without a folio reference

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call foliowaitwriteback without a folio reference foliowaitwriteback requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed...

CVE-2024-43832 s390/uv: Don't call folio_wait_writeback() without a folio reference

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call foliowaitwriteback without a folio reference foliowaitwriteback requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed...

PT-2024-33857

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel's identity mapping, where the use of GB pages can lead to the inclusion of large ranges of addresses not actually requested, including areas marked...

libuv: Improper Domain Lookup that potentially leads to SSRF attacks

A server-side request forgery SSRF flaw was found in the libuv package due to how the hostnameascii variable is handled in uvgetaddrinfo and uvidnatoascii. When the hostname exceeds 256 characters, it gets truncated without a terminating null byte. As a result, attackers may be able to access...

kernel: x86/platform/uv: Use alternate source for socket to node data

In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Use alternate source for socket to node data The UV code attempts to build a set of tables to allow it to do bidirectional socketnode lookups. But when nrcpus is set to a smaller number than actually present, the...