Most recent entries from all

ALSA-2022:1550 — Important: kernel security and bug fix update

Affected: AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use-after-free in RDMA listen() (CVE-2021-4028)

* kernel: heap out of bounds write in nf_dup_netdev.c (CVE-2022-25636)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Backport DFS fixes from upstream (BZ#2056329)

* [AlmaLinux8.5] lpfc driver often fails to detect storage directly connected to Broadcom FC HBA (BZ#2058193)

* nf_reinject calls nf_queue_entry_free on an already freed entry->state (BZ#2061446)

* gfs2 blocking in gdlm_lock (BZ#2069750)

bdu:2022-00997

Withdrawn: BELL-CVE-2022-25636 — CVE-2022-25636 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2022-avi-230 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un a…

certfr-2022-avi-230

EUVD-2026-14644

fkie_cve-2022-25636

net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.

GHSA-44m9-c2jp-x4c5

net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.

gsd-2022-25636

openSUSE-SU-2022:1037-1 — Security update for the Linux Kernel

Security update for the Linux Kernel

RHSA-2022:1413 — Red Hat Security Advisory: kernel-rt security and bug fix update

kernel: fget: check that the fd still exists after getting a ref to it kernel: cgroups v1 release_agent feature may allow privilege escalation kernel: heap out of bounds write in nf_dup_netdev.c

SUSE-SU-2022:0978-1 — Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP3)

Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP3)

UBUNTU-CVE-2022-25636

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-gcp-5.4, Ubuntu:18.04:LTS: linux-gke-5.4, Ubuntu:18.04:LTS: linux-gkeop-5.4, Ubuntu:18.04:LTS: linux-hwe-5.4, Ubuntu:18.04:LTS: linux-ibm-5.4, Ubuntu:18.04:LTS: linux-oracle-5.4, Ubuntu:18.04:LTS: linux-raspi-5.4 and 59 more

net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.