Skip to content
OpenAdvisories

Summary

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher beschriebene Auswirkungen zu erzielen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 77

  • Critical 9.8

    scsi: target: iscsi: Fix a race condition between login_work and the login thread

    In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix a race condition between login_work and the login thread In case a malicious initiator sends some random data immediately after a login PDU; the iscsi_target_sk_data_…

  • High 8.8

    Bluetooth: L2CAP: Fix use-after-free

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in l2cap_le_command_rej.

  • High 8.8

    wifi: ath11k: Fix SKB corruption in REO destination ring

    In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix SKB corruption in REO destination ring While running traffics for a long time, randomly an RX descriptor filled with value "0" from REO destination ring is received. This de…

  • High 8.8

    scsi: qla2xxx: Wait for io return on terminate rport

    In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Wait for io return on terminate rport System crash due to use after free. Current code allows terminate_rport_io to exit before making sure all IOs has returned. For FCP-2 devi…

  • High 8.8

    HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()

    In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device can trigger a slab out-of-bounds during mt_report_fixup() by passing in report descriptor smaller th…

  • High 8.8

    net: rose: convert 'use' field to refcount_t

    In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The 'use' field in struct rose_neigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a rose_neigh struc…

  • High 8.8

    net: rose: include node references in rose_neigh refcount

    In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct rose_neigh tracks references…

  • High 8.4

    HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length

    In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length The QuickI2C ACPI _DSD methods return ICRS and ISUB data with a trailing byte, making the actual length is one more byte than…

  • High 8.2

    netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one

    In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nf_conntrack_dccp_packet() has an unique: dh = skb_header_pointer(skb, dataoff, sizeof(_d…

  • High 7.8

    Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev() syzbot is again reporting attempt to cancel uninitialized work at mgmt_index_removed() [1], for setting of HCI_MGMT flag from …

  • High 7.8

    cifs: fix oops during encryption

    In the Linux kernel, the following vulnerability has been resolved: cifs: fix oops during encryption When running xfstests against Azure the following oops occurred on an arm64 system Unable to handle kernel write to read-only memory at virtual address ffff00…

  • High 7.8

    rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails

    In the Linux kernel, the following vulnerability has been resolved: rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails If getting an ID or setting up a work queue in rbd_dev_create() fails, use-after-free on rbd_dev->rbd_client, rbd_dev->sp…

  • High 7.8

    net: fec: Better handle pm_runtime_get() failing in .remove()

    In the Linux kernel, the following vulnerability has been resolved: net: fec: Better handle pm_runtime_get() failing in .remove() In the (unlikely) event that pm_runtime_get() (disguised as pm_runtime_resume_and_get()) fails, the remove callback returned an e…

  • High 7.8

    nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput During unmount process of nilfs2, nothing holds nilfs_root structure after nilfs2 detaches its writer in nilfs_detach_log_…

  • High 7.8

    fbdev/ep93xx-fb: Do not assign to struct fb_info.dev

    In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fb_info.dev Do not assing the Linux device to struct fb_info.dev. The call to register_framebuffer() initializes the field to the fbdev device. Driver…

  • High 7.8

    drm/msm/dp: Free resources after unregistering them

    In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks through the submodules to unregister and clean things up. But if the unbind happens because the D…

  • High 7.8

    scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()

    In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() The function mpi3mr_get_all_tgt_info() has four issues: 1) It calculates valid entry length in alltgt_info assuming the header part of th…

  • High 7.8

    pstore/ram: Check start of empty przs during init

    In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would assume a prz was valid after seeing that …

  • High 7.8

    bnxt_en: Fix memory corruption when FW resources change during ifdown

    In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix memory corruption when FW resources change during ifdown bnxt_set_dflt_rings() assumes that it is always called before any TC has been created. So it doesn't take bp->num_tc into…

  • High 7.8

    RISC-V: KVM: fix stack overrun when loading vlenb

    In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: fix stack overrun when loading vlenb The userspace load can put up to 2048 bits into an xlen bit stack buffer. We want only xlen bits, so check the size beforehand.

  • High 7.8

    HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save

    In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save Improper use of secondary pointer (&dev->i2c_subip_regs) caused kernel crash and out-of-bounds error: BUG: KAS…

  • High 7.8

    perf: Avoid undefined behavior from stopping/starting inactive events

    In the Linux kernel, the following vulnerability has been resolved: perf: Avoid undefined behavior from stopping/starting inactive events Calling pmu->start()/stop() on perf events in PERF_EVENT_STATE_OFF can leave event->hw.idx at -1. When PMU drivers later …

  • High 7.8

    smb: client: fix race with concurrent opens in rename(2)

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding…

  • High 7.8

    efi: stmm: Fix incorrect buffer allocation method

    In the Linux kernel, the following vulnerability has been resolved: efi: stmm: Fix incorrect buffer allocation method The communication buffer allocated by setup_mm_hdr() is later on passed to tee_shm_register_kernel_buf(). The latter expects those buffers to…

  • High 7.1

    wifi: mac80211_hwsim: drop short frames

    In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: drop short frames While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded through wmediumd or similar user…

  • High 7.1

    efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare

    In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe…

  • Medium 5.5

    media: vimc: Fix wrong function called when vimc_init() fails

    In the Linux kernel, the following vulnerability has been resolved: media: vimc: Fix wrong function called when vimc_init() fails In vimc_init(), when platform_driver_register(&vimc_pdrv) fails, platform_driver_unregister(&vimc_pdrv) is wrongly called rather …

  • Medium 5.5

    floppy: Fix memory leak in do_floppy_init()

    In the Linux kernel, the following vulnerability has been resolved: floppy: Fix memory leak in do_floppy_init() A memory leak was reported when floppy_alloc_disk() failed in do_floppy_init(). unreferenced object 0xffff888115ed25a0 (size 8): comm "modprobe", p…

  • Medium 5.5

    rapidio: fix possible name leaks when rio_add_device() fails

    In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rio_add_device() fails Patch series "rapidio: fix three possible memory leaks". This patchset fixes three name leaks in error handling. - patch #1 fixes …

  • Medium 5.5

    ext4: fix null-ptr-deref in ext4_write_info

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix null-ptr-deref in ext4_write_info I caught a null-ptr-deref bug as follows: ================================================================== KASAN: null-ptr-deref in range [0x0000…

  • Medium 5.5

    ext4: init quota for 'old.inode' in 'ext4_rename'

    In the Linux kernel, the following vulnerability has been resolved: ext4: init quota for 'old.inode' in 'ext4_rename' Syzbot found the following issue: ext4_parse_param: s_want_extra_isize=128 ext4_inode_info_init: s_want_extra_isize=32 ext4_rename: old.inode…

  • Medium 5.5

    mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()

    In the Linux kernel, the following vulnerability has been resolved: mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and …

  • Medium 5.5

    nfsd: Fix a memory leak in an error handling path

    In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdup_user() call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks.

  • Medium 5.5

    misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()

    In the Linux kernel, the following vulnerability has been resolved: misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() If device_register() returns error in tifm_7xx1_switch_media(), name of kobject which is allocated in dev_set_name() called in…

  • Medium 5.5

    cifs: Fix xid leak in cifs_create()

    In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_create() If the cifs already shutdown, we should free the xid before return, otherwise, the xid will be leaked.

  • Medium 5.5

    net: hns: fix possible memory leak in hnae_ae_register()

    In the Linux kernel, the following vulnerability has been resolved: net: hns: fix possible memory leak in hnae_ae_register() Inject fault while probing module, if device_register() fails, but the refcount of kobject is not decreased to 0, the name allocated i…

  • Medium 5.5

    netfilter: nft_set_rbtree: fix overlap expiration walk

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: fix overlap expiration walk The lazy gc on insert that should remove timed-out entries fails to release the other half of the interval, if any. Can be reproduced wi…

  • Medium 5.5

    fsdax: force clear dirty mark if CoW

    In the Linux kernel, the following vulnerability has been resolved: fsdax: force clear dirty mark if CoW XFS allows CoW on non-shared extents to combat fragmentation[1]. The old non-shared extent could be mwrited before, its dax entry is marked dirty. This re…

  • Medium 5.5

    drm/radeon: Fix integer overflow in radeon_cs_parser_init

    In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeon_cs_parser_init The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32…

  • Medium 5.5

    net: fix net_dev_start_xmit trace event vs skb_transport_offset()

    In the Linux kernel, the following vulnerability has been resolved: net: fix net_dev_start_xmit trace event vs skb_transport_offset() After blamed commit, we must be more careful about using skb_transport_offset(), as reminded us by syzbot: WARNING: CPU: 0 PI…

  • Medium 5.5

    md/raid10: fix wrong setting of max_corr_read_errors

    In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix wrong setting of max_corr_read_errors There is no input check when echo md/max_read_errors and overflow might occur. Add check of input number.

  • Medium 5.5

    ext4: fix WARNING in mb_find_extent

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in mb_find_extent Syzbot found the following issue: EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit suppor…

  • Medium 5.5

    recordmcount: Fix memory leaks in the uwrite function

    In the Linux kernel, the following vulnerability has been resolved: recordmcount: Fix memory leaks in the uwrite function Common realloc mistake: 'file_append' nulled but not freed upon failure

  • Medium 5.5

    KVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm

    In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm Currently there is no synchronisation between finalize_pkvm() and kvm_arm_init() initcalls. The finalize_pkvm() proceeds hap…

  • Medium 5.5

    ext2/dax: Fix ext2_setsize when len is page aligned

    In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fix ext2_setsize when len is page aligned PAGE_ALIGN(x) macro gives the next highest value which is multiple of pagesize. But if x is already page aligned then it simply returns x. …

  • Medium 5.5

    drm/msm/mdp5: Don't leak some plane state

    In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Don't leak some plane state Apparently no one noticed that mdp5 plane states leak like a sieve ever since we introduced plane_state->commit refcount a few years ago in 21a01abbe…

  • Medium 5.5

    drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()

    In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() Change logging from drm_{err,info}() to dev_{err,info}() in functions mtk_dp_aux_transfer() and mtk_dp_aux_do_transfer(): thi…

  • Medium 5.5

    powerpc: Don't try to copy PPR for task with NULL pt_regs

    In the Linux kernel, the following vulnerability has been resolved: powerpc: Don't try to copy PPR for task with NULL pt_regs powerpc sets up PF_KTHREAD and PF_IO_WORKER with a NULL pt_regs, which from my (arguably very short) checking is not commonly done fo…

  • Medium 5.5

    iommufd/selftest: Catch overflow of uptr and length

    In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Catch overflow of uptr and length syzkaller hits a WARN_ON when trying to have a uptr close to UINTPTR_MAX: WARNING: CPU: 1 PID: 393 at drivers/iommu/iommufd/selftest.c:403 …

  • Medium 5.5

    fs/ntfs3: Enhance sanity check while generating attr_list

    In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Enhance sanity check while generating attr_list ni_create_attr_list uses WARN_ON to catch error cases while generating attribute list, which only prints out stack trace and may not …

  • Medium 5.5

    caif: fix memory leak in cfctrl_linkup_request()

    In the Linux kernel, the following vulnerability has been resolved: caif: fix memory leak in cfctrl_linkup_request() When linktype is unknown or kzalloc failed in cfctrl_linkup_request(), pkt is not released. Add release process to error path.

  • Medium 5.5

    genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()

    In the Linux kernel, the following vulnerability has been resolved: genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() If ipi_send_{mask|single}() is called with an invalid interrupt number, all the local variables there will be NULL. ipi_send…

  • Medium 5.5

    USB: chipidea: fix memory leak with using debugfs_lookup()

    In the Linux kernel, the following vulnerability has been resolved: USB: chipidea: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things sim…

  • Medium 5.5

    drm/mediatek: Add error handling for old state CRTC in atomic_disable

    In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add error handling for old state CRTC in atomic_disable Introduce error handling to address an issue where, after a hotplug event, the cursor continues to update. This situation…

  • Medium 5.5

    drm/xe/vm: Clear the scratch_pt pointer on error

    In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Clear the scratch_pt pointer on error Avoid triggering a dereference of an error pointer on cleanup in xe_vm_free_scratch() by clearing any scratch_pt error pointer. (cherry picked…

  • Medium 5.5

    ice: fix NULL pointer dereference in ice_unplug_aux_dev() on reset

    In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_unplug_aux_dev() on reset Issuing a reset when the driver is loaded without RDMA support, will results in a crash as it attempts to remove RDMA's non-…

  • Medium 5.5

    io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths

    In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths Since the buffers are mapped from userspace, it is prudent to use READ_ONCE() to read the value into a local variabl…

  • Medium 5.5

    drm/msm/dpu: Add a null ptr check for dpu_encoder_needs_modeset

    In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add a null ptr check for dpu_encoder_needs_modeset The drm_atomic_get_new_connector_state() can return NULL if the connector is not part of the atomic state. Add a check to preve…

  • Medium 5.5

    io_uring/kbuf: fix signedness in this_len calculation

    In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: fix signedness in this_len calculation When importing and using buffers, buf->len is considered unsigned. However, buf->len is converted to signed int when committing. This can…

  • Medium 5.5

    trace/fgraph: Fix the warning caused by missing unregister notifier

    In the Linux kernel, the following vulnerability has been resolved: trace/fgraph: Fix the warning caused by missing unregister notifier This warning was triggered during testing on v6.16: notifier callback ftrace_suspend_notifier_call already registered WARNI…

  • Medium 5.5

    net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path In the error path of hws_pool_buddy_init(), the buddy allocator cleanup doesn't free the allocator structure itself, causing a…

  • Medium 5.5

    fbnic: Move phylink resume out of service_task and into open/close

    In the Linux kernel, the following vulnerability has been resolved: fbnic: Move phylink resume out of service_task and into open/close The fbnic driver was presenting with the following locking assert coming out of a PM resume: [ 42.208116][ T164] RTNL: asser…

  • Medium 5.5

    net/mlx5: Fix lockdep assertion on sync reset unload event

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unload event Fix lockdep assertion triggered during sync reset unload event. When the sync reset flow is initiated using the devlink reload fw_ac…

  • Medium 5.5

    mISDN: hfcpci: Fix warning when deleting uninitialized timer

    In the Linux kernel, the following vulnerability has been resolved: mISDN: hfcpci: Fix warning when deleting uninitialized timer With CONFIG_DEBUG_OBJECTS_TIMERS unloading hfcpci module leads to the following splat: [ 250.215892] ODEBUG: assert_init not avail…

  • Medium 5.5

    net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow When an invalid stc_type is provided, the function allocates memory for shared_stc but jumps to unlock_and_out witho…

  • Medium 4.7

    power: supply: axp288_fuel_gauge: Fix external_power_changed race

    In the Linux kernel, the following vulnerability has been resolved: power: supply: axp288_fuel_gauge: Fix external_power_changed race fuel_gauge_external_power_changed() dereferences info->bat, which gets sets in axp288_fuel_gauge_probe() like this: info->bat…

  • Medium 4.7

    workqueue: fix data race with the pwq->stats[] increment

    In the Linux kernel, the following vulnerability has been resolved: workqueue: fix data race with the pwq->stats[] increment KCSAN has discovered a data race in kernel/workqueue.c:2598: [ 1863.554079] ==========================================================…

  • Unscored —
    CVE-2022-50345 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  • Unscored —

    net: macb: fix unregister_netdev call order in macb_remove()

    In the Linux kernel, the following vulnerability has been resolved: net: macb: fix unregister_netdev call order in macb_remove() When removing a macb device, the driver calls phy_exit() before unregister_netdev(). This leads to a WARN from kernfs: -----------…

  • Unscored —

    HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()

    In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() in ntrig_report_version(), hdev parameter passed from hid_probe(). sending descriptor to /dev/uhid can make hdev->dev…

  • Unscored —

    sctp: initialize more fields in sctp_v6_from_sk()

    In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk() syzbot found that sin6_scope_id was not properly initialized, leading to undefined behavior. Clear sin6_scope_id and sin6_flowinfo. BUG: KMSA…

  • Unscored —

    ftrace: Fix potential warning in trace_printk_seq during ftrace_dump

    In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_dump_one() concurrently with reading trace_pipe, a WARN_ON_ONCE() in trace_printk_seq() can be trigger…

  • Unscored —

    fs/smb: Fix inconsistent refcnt update

    In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in `smb2_compound_op`. Such inconsistent update could lead to possible resource leaks. Why it …

  • Unscored —

    KVM: x86: use array_index_nospec with indices that come from guest

    In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to miti…

  • Unscored —

    HID: asus: fix UAF via HID_CLAIMED_INPUT validation

    In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation After hid_hw_start() is called hidinput_connect() will eventually be called to set up the device with the input layer since the HID_CONNECT…

  • Unscored —

    atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().

    In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). syzbot reported the splat below. [0] When atmtcp_v_open() or atmtcp_v_close() is called via connect() or close(), atmtcp_send_co…

  • Unscored —

    xfs: do not propagate ENODATA disk errors into xattr code

    In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found…

Revision history

  1. #95

    Neue Updates von Ubuntu aufgenommen

  2. #94

    Neue Updates von Ubuntu aufgenommen

  3. #93

    Neue Updates von Ubuntu aufgenommen

  4. #92

    Neue Updates von Debian aufgenommen

  5. #91

    Neue Updates von Debian aufgenommen

  6. #90

    Neue Updates von Debian aufgenommen

  7. #89

    Neue Updates von Debian aufgenommen

  8. #88

    Neue Updates von Dell aufgenommen

  9. #87

    Neue Updates von IBM aufgenommen

  10. #86

    Neue Updates von Siemens aufgenommen

  11. #85

    Neue Updates von Oracle Linux aufgenommen

  12. #84

    Neue Updates von Oracle Linux aufgenommen

  13. #83

    Neue Updates von F5 aufgenommen

  14. #82

    Neue Updates von Dell aufgenommen

  15. #81

    Neue Updates von SUSE aufgenommen

  16. #80

    Neue Updates von SUSE aufgenommen

  17. #79

    Neue Updates von Oracle Linux aufgenommen

  18. #78

    Neue Updates von Ubuntu aufgenommen

  19. #77

    Neue Updates von Ubuntu aufgenommen

  20. #76

    Neue Updates von SUSE aufgenommen

  21. #75

    Neue Updates von SUSE aufgenommen

  22. #74

    Neue Updates von SUSE und Rocky Enterprise Software Foundation aufgenommen

  23. #73

    Neue Updates von Ubuntu und SUSE aufgenommen

  24. #72

    Neue Updates von SUSE und Oracle Linux aufgenommen

  25. #71

    Neue Updates von SUSE und Ubuntu aufgenommen

References