Most recent entries from all

ALSA-2022:0825 — Important: kernel security, bug fix, and enhancement update

Affected: AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

The following packages have been upgraded to a later upstream version: kernel (4.18.0). (BZ#2036888)

Security Fix(es):

* kernel: improper initialization of the "flags" member of the new pipe_buffer (CVE-2022-0847)

* kernel: Use After Free in unix_gc() which could result in a local privilege escalation (CVE-2021-0920)

* kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout (CVE-2021-4154)

* kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330)

* kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (CVE-2022-0435)

* kernel: cgroups v1 release_agent feature may allow privilege escalation (CVE-2022-0492)

* kernel: missing check in ioctl allows kernel memory read/write (CVE-2022-0516)

* kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Intel QAT Kernel power up fix (BZ#2016437)

* AlmaLinux8.4 seeing scsi_dma_map failed with mpt3sas driver and affecting performance (BZ#2018928)

* [Lenovo 8.4 bug] audio_HDMI certification failed on AlmaLinux 8.4GA (No hdmi out) (BZ#2027335)

* [AlmaLinux-8.5][4.18.0-323.el8.ppc64le][POWER8/9/10] security_flav…

bdu:2022-00869

certfr-2022-avi-193 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Elles permettent à un attaquant de provoqu…

certfr-2022-avi-193

EUVD-2026-11016

fkie_cve-2022-0516

A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4.

GHSA-j8f5-q8pj-2j78

gsd-2022-0516

msrc_CVE-2022-0516 — A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Lin…

msrc_CVE-2022-0516

openSUSE-SU-2022:0755-1 — Security update for the Linux Kernel

Security update for the Linux Kernel

RHSA-2022:0777 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

kernel: Use After Free in unix_gc() which could result in a local privilege escalation kernel: use-after-free in RDMA listen() kernel: tcp: fix page frag corruption on page fault kernel: possible privileges escalation due to missing TLB flush kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS kernel: missing check in ioctl allows kernel memory read/write kernel: failing usercopy allows for use-after-free exploitation

SUSE-SU-2022:0615-1 — Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP3)

Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP3)

UBUNTU-CVE-2022-0516

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-gcp-5.4, Ubuntu:18.04:LTS: linux-gke-5.4, Ubuntu:18.04:LTS: linux-gkeop-5.4, Ubuntu:18.04:LTS: linux-hwe-5.4, Ubuntu:18.04:LTS: linux-ibm-5.4, Ubuntu:18.04:LTS: linux-oracle-5.4, Ubuntu:18.04:LTS: linux-raspi-5.4 and 58 more

WID-SEC-W-2022-0061 — Linux Kernel: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.