Most recent entries from all

ALSA-2022:7110 — Important: kernel security, bug fix, and enhancement update

Affected: AlmaLinux:8: bpftool, AlmaLinux:8: kernel, AlmaLinux:8: kernel-abi-stablelists, AlmaLinux:8: kernel-core, AlmaLinux:8: kernel-cross-headers, AlmaLinux:8: kernel-debug, AlmaLinux:8: kernel-debug-core, AlmaLinux:8: kernel-debug-devel, AlmaLinux:8: kernel-debug-modules, AlmaLinux:8: kernel-debug-modules-extra and 10 more

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* A use-after-free in cls_route filter implementation may lead to privilege escalation (CVE-2022-2588) * Information leak in scsi_ioctl() (CVE-2022-0494) * A kernel-info-leak issue in pfkey_register (CVE-2022-1353) * RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900) * Branch Type Confusion (non-retbleed) (CVE-2022-23825) * RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Add s390_iommu_aperture kernel parameter (BZ#2081324) * Blackscreen and hangup after resume from hibernate or S3 with DFGX WX3200 (BZ#2091065) * Update NVME subsystem with bug fixes and minor changes (BZ#2106017) * Fix parsing of nw_proto for IPv6 fragments (BZ#2106703) * "vmcore failed, _exitcode:139" error observed while capturing vmcore during fadump after memory remove. incomplete vmcore is captured. (BZ#2107488) * 'disable_policy' is ignored for addresses configured on a down interface (BZ#2109971) * Backport request for new cpufreq.default_governor kernel command line parameter (BZ#2109996) * Panics in mpt3sas mpt3sas_halt_firmware() if mpt3sas_fwfault_debug=1 enabled when poweroff issued to server (BZ#2…

certfr-2022-avi-1036 — De multiples vulnérabilités ont été corrigées dans le noyau Linux de Red Hat. Elles permett…

certfr-2022-avi-1036

fkie_cve-2022-23816

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

gsd-2022-23816

openSUSE-SU-2024:12219-1 — xen-4.16.1_02-3.1 on GA media

xen-4.16.1_02-3.1 on GA media

RHSA-2022:7134 — Red Hat Security Advisory: kernel-rt security and bug fix update

kernel: information leak in scsi_ioctl() kernel: kernel info leak issue in pfkey_register kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions hw: cpu: AMD: Branch Type Confusion (non-retbleed) hw: cpu: Intel: information disclosure via local access hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions

SUSE-SU-2022:2557-1 — Security update for xen

Security update for xen

UBUNTU-CVE-2022-23816

Affected: Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 40 more

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

WID-SEC-W-2022-0659 — VMware ESXi: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Ein lokaler Angreifer kann mehrere Schwachstellen in VMware ESXi und VMware Cloud Foundation ausnutzen, um Informationen offenzulegen.