Most recent entries from all

ALSA-2021:1093 — Important: kernel security, bug fix, and enhancement update

Affected: AlmaLinux:8: kernel-abi-whitelists, AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466)

* kernel: SCSI target (LIO) write to any block on ILO backstore (CVE-2020-28374)

* kernel: Use after free via PI futex state (CVE-2021-3347)

* kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c (CVE-2021-26708)

* kernel: out-of-bounds read in libiscsi module (CVE-2021-27364)

* kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365)

* Kernel: KVM: host stack overflow due to lazy update IOAPIC (CVE-2020-27152)

* kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* race condition when creating child sockets from syncookies (BZ#1915529)

* On System Z, a hash needs state randomized for entropy extraction (BZ#1915816)

* scsi: target: core_tmr_abort_task() reporting multiple aborts for the same se_cmd->tag (BZ#1918354)

* [mlx5] VF interface stats are not reflected in "ip -s link show" / "ifconfig <vf>" commands (BZ#1921060)

* Win10 guest automatic reboot after migration in Win10 and WSL2 on Intel hosts (BZ#1923281)

* [AlmaLinux 8.3] Repeated messages - Unable to burst-read optrom segment (BZ#1924222)

* Backport…

bdu:2021-01213

certfr-2021-avi-191 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Certaines d'entre elles permettent à…

certfr-2021-avi-191

cnvd-2021-19423

EUVD-2026-25493

fkie_cve-2021-27364

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

GHSA-qh7p-rxx9-vwx2

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

gsd-2021-27364

msrc_CVE-2021-27364 — An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected b…

msrc_CVE-2021-27364

OESA-2021-1111 — kernel security update

Affected: openEuler:20.03-LTS: kernel, openEuler:20.03-LTS-SP1: kernel

The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc. Security Fix(es): An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests (such as out of memory conditions), it isn't correct to assume a plain bug. Memory allocations potentially causing such crashes occur only when Linux is running in PV mode, though. This affects drivers/block/xen-blkback/blkback.c and drivers/xen/xen-scsiback.c.(CVE-2021-26931) An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be discarded by later processing, resulting in the caller assuming successful mapping, and hence subsequent operations trying to access space that wasn't mapped. In another case, internal state would be insufficiently updated, preventing safe recovery from the error. This affects drivers/block/xen-blkback/blkback.c.(CVE-2021-26930) An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant map…

openSUSE-SU-2021:0532-1 — Security update for the Linux Kernel

Security update for the Linux Kernel

RHSA-2021:1069 — Red Hat Security Advisory: kpatch-patch security update

kernel: out-of-bounds read in libiscsi module kernel: heap buffer overflow in the iSCSI subsystem

SUSE-SU-2021:1046-1 — Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP5)

Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP5)

UBUNTU-CVE-2021-27364

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-aws-hwe, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe and 71 more

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.