Download
| Alert*
oval:org.secpod.oval:def:89051808
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts . * CVE-2023-52463: Fixed null pointer dereference in efivarfs . * CVE-2023-52559: Fixed a bug by avoidin ... oval:org.secpod.oval:def:1601893 A flaw was found in the ATA over Ethernet driver in the Linux kernel. The aoecmd_cfg_pkts function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead t ... oval:org.secpod.oval:def:1507522 [5.4.17-2136.331.7.el8] - Revert tracing/trigger: Fix to return error if failed to alloc snapshot - Revert selftests: mm: fix map_hugetlb failure on 64K page size systems [Orabug: 36584568] - Revert net/mlx5: Enable SW-defined RoCEv2 UDP source port [Orabug: 36530159] - PCI: boot time optimizatio ... oval:org.secpod.oval:def:99481 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2023-2124 Kyle Zeng, Akshay Ajayan and Fish Wang discovered that missing metadata validation may result in denial of service or potential privilege es ... oval:org.secpod.oval:def:10000597 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2023-2124 Kyle Zeng, Akshay Ajayan and Fish Wang discovered that missing metadata validation may result in denial of service or potential privilege es ... oval:org.secpod.oval:def:1702217 A flaw was found in the ATA over Ethernet driver in the Linux kernel. The aoecmd_cfg_pkts function improperly updates the refcnt on 'struct net_device', and a use-after-free can be triggered by racing between the free on the struct and the access through the 'skbtxq' global queue. This could lead t ... oval:org.secpod.oval:def:1702222 A flaw was found in the ATA over Ethernet driver in the Linux kernel. The aoecmd_cfg_pkts function improperly updates the refcnt on 'struct net_device', and a use-after-free can be triggered by racing between the free on the struct and the access through the 'skbtxq' global queue. This could lead t ... oval:org.secpod.oval:def:100000 The mobile IPv6 daemon allows nodes to remain reachable while moving around in the IPv6 Internet. oval:org.secpod.oval:def:1702167 dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing check for struct dm_ioctl.target_count. A flaw was found in the ATA over Ethernet driver in the Linux kernel. The aoecmd_cfg_pkts function imp ... oval:org.secpod.oval:def:1507525 [5.4.17-2136.331.7.el7] - Revert tracing/trigger: Fix to return error if failed to alloc snapshot - Revert selftests: mm: fix map_hugetlb failure on 64K page size systems |