Most recent entries from all

ALSA-2021:3447 — Important: kernel security and bug fix update

Affected: AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: powerpc: KVM guest OS users can cause host OS memory corruption (CVE-2021-37576)

* kernel: slab-out-of-bounds access in xdr_set_page_base() in net/sunrpc/xdr.c (CVE-2021-38201)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Update Broadcom Emulex lpfc driver for AlmaLinux8.5 with bug fixes (BZ#1948608)

* cyclictest shows >50us latency when guest enters idle (RT guest with 18 RT vCPUs) (BZ#1981336)

* xfrm: backports from upstream (BZ#1981840)

* A task is stuck waiting for the completion of the vmci_resouce releasing upon the balloon reset. (BZ#1982042)

* [mlx5] backport driver bits of net: zero-initialize tc skb extension on allocation (BZ#1982220)

* Kernel cannot kill a process doing compaction for hugepage allocation (BZ#1984085)

* AlmaLinux8.4 Nightly[0108] - [P10] [Regression] Kdump failed on AlmaLinux8.4 on SAN disk via flavafish adapter (qla2xxx/HPT/Radix) (BZ#1986156)

* [AlmaLinux8.5] scheduler updates and fixes (BZ#1987296)

* AlmaLinux 8.3 using FCOE via a FastLinQ QL45000 card will not manually scan in LUN from Target_id's over 8 (BZ#1989097)

* fixes for oopses in security mitigation runtime code patching (BZ#1989174)

* act mirred doesn't scrub packets when sending them to ingress (BZ…

bdu:2021-04711

certfr-2021-avi-680 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un…

certfr-2021-avi-680

cnvd-2021-60517

EUVD-2026-30208

fkie_cve-2021-38201

net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by performing many NFS 4.2 READ_PLUS operations.

GHSA-5w93-hr8w-rppx

net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by performing many NFS 4.2 READ_PLUS operations.

gsd-2021-38201

msrc_CVE-2021-38201 — net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_b…

msrc_CVE-2021-38201

RHSA-2021:3440 — Red Hat Security Advisory: kernel-rt security and bug fix update

kernel: slab-out-of-bounds access in xdr_set_page_base() in net/sunrpc/xdr.c

RHSA-2021:3447 — Red Hat Security Advisory: kernel security and bug fix update

kernel: powerpc: KVM guest OS users can cause host OS memory corruption kernel: slab-out-of-bounds access in xdr_set_page_base() in net/sunrpc/xdr.c

UBUNTU-CVE-2021-38201

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gcp-edge, Ubuntu:18.04:LTS: linux-gke-4.15 and 19 more

net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by performing many NFS 4.2 READ_PLUS operations.

WID-SEC-W-2022-0515 — IBM Spectrum Protect: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, seine Rechte zu erweitern oder beliebigen Code mit Root-Rechten auszuführen.