Most recent entries from all

ALSA-2023:1469 — Important: kernel-rt security and bug fix update

Affected: AlmaLinux:9: kernel-rt, AlmaLinux:9: kernel-rt-core, AlmaLinux:9: kernel-rt-debug, AlmaLinux:9: kernel-rt-debug-core, AlmaLinux:9: kernel-rt-debug-devel, AlmaLinux:9: kernel-rt-debug-kvm, AlmaLinux:9: kernel-rt-debug-modules, AlmaLinux:9: kernel-rt-debug-modules-extra, AlmaLinux:9: kernel-rt-devel, AlmaLinux:9: kernel-rt-kvm and 2 more

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744) * ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266) * kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z3 Batch (BZ#2170460)

bdu:2023-00382

Withdrawn: BELL-CVE-2023-0266 — CVE-2023-0266 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2023-avi-0066 — De multiples vulnérabilités ont été corrigées dans le noyau Linux de SUSE. Elles permettent…

certfr-2023-avi-0066

cnvd-2023-58991

EUVD-2026-255785

fkie_cve-2023-0266

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e

GHSA-h8jm-3c82-6vvq

gsd-2023-0266

msrc_CVE-2023-0266 — Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel

msrc_CVE-2023-0266

OESA-2023-1198 — kernel security update

Affected: openEuler:20.03-LTS-SP3: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e(CVE-2023-0266)

RHSA-2023:1202 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c kernel: net: CPU soft lockup in TC mirred egress-to-ingress action kernel: stack overflow in do_proc_dointvec and proc_skip_spaces kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF

RHSA-2023:1470 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

kernel: net: CPU soft lockup in TC mirred egress-to-ingress action kernel: tun: avoid double free in tun_free_netdev kernel: x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF

SUSE-SU-2023:0152-1 — Security update for the Linux Kernel

Security update for the Linux Kernel

UBUNTU-CVE-2023-0266

Affected: Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.4 and 118 more

WID-SEC-W-2023-0112 — Linux Kernel: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und nicht spezifizierte Auswirkungen zu verursachen.