Headline

Red Hat Security Advisory 2023-0395-01

Red Hat Security Advisory 2023-0395-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system.

1 year ago

Packet Storm

Open in Source

#vulnerability #linux #red_hat #js #c++#sap

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security and bug fix update
Advisory ID: RHSA-2023:0395-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2023:0395
Issue date: 2023-01-24
CVE Names: CVE-2022-2964
====================================================================

Summary:

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

Relevant releases/architectures:

Red Hat Enterprise Linux BaseOS AUS (v. 8.2) - aarch64, noarch, ppc64le, s390x, x86_64
Red Hat Enterprise Linux BaseOS E4S (v. 8.2) - aarch64, noarch, ppc64le, s390x, x86_64
Red Hat Enterprise Linux BaseOS TUS (v. 8.2) - aarch64, noarch, ppc64le, s390x, x86_64

Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

kernel: memory corruption in AX88179_178A based USB ethernet device.
(CVE-2022-2964)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Bug Fix(es):

i40e sriov virtual functions not created (BZ#2140104)
Data corruption on small files served by httpd, which is backed by
cifs-mount (BZ#2144470)
The “kernel BUG at mm/usercopy.c:103!” from BZ 2041529 is back on
rhel-8.5 (BZ#2153233)

Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Bugs fixed (https://bugzilla.redhat.com/):

2067482 - CVE-2022-2964 kernel: memory corruption in AX88179_178A based USB ethernet device.

Package List:

Red Hat Enterprise Linux BaseOS AUS (v. 8.2):

Source:
kernel-4.18.0-193.98.1.el8_2.src.rpm

aarch64:
bpftool-4.18.0-193.98.1.el8_2.aarch64.rpm
bpftool-debuginfo-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-core-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-cross-headers-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-debug-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-debug-core-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-debug-debuginfo-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-debug-devel-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-debug-modules-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-debug-modules-extra-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-debuginfo-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-debuginfo-common-aarch64-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-devel-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-headers-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-modules-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-modules-extra-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-tools-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-tools-debuginfo-4.18.0-193.98.1.el8_2.aarch64.rpm
kernel-tools-libs-4.18.0-193.98.1.el8_2.aarch64.rpm
perf-4.18.0-193.98.1.el8_2.aarch64.rpm
perf-debuginfo-4.18.0-193.98.1.el8_2.aarch64.rpm
python3-perf-4.18.0-193.98.1.el8_2.aarch64.rpm
python3-perf-debuginfo-4.18.0-193.98.1.el8_2.aarch64.rpm

noarch:
kernel-abi-whitelists-4.18.0-193.98.1.el8_2.noarch.rpm
kernel-doc-4.18.0-193.98.1.el8_2.noarch.rpm

ppc64le:
bpftool-4.18.0-193.98.1.el8_2.ppc64le.rpm
bpftool-debuginfo-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-core-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-cross-headers-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-debug-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-debug-core-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-debug-debuginfo-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-debug-devel-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-debug-modules-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-debug-modules-extra-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-debuginfo-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-debuginfo-common-ppc64le-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-devel-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-headers-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-modules-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-modules-extra-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-tools-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-tools-debuginfo-4.18.0-193.98.1.el8_2.ppc64le.rpm
kernel-tools-libs-4.18.0-193.98.1.el8_2.ppc64le.rpm
perf-4.18.0-193.98.1.el8_2.ppc64le.rpm
perf-debuginfo-4.18.0-193.98.1.el8_2.ppc64le.rpm
python3-perf-4.18.0-193.98.1.el8_2.ppc64le.rpm
python3-perf-debuginfo-4.18.0-193.98.1.el8_2.ppc64le.rpm

s390x:
bpftool-4.18.0-193.98.1.el8_2.s390x.rpm
bpftool-debuginfo-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-core-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-cross-headers-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-debug-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-debug-core-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-debug-debuginfo-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-debug-devel-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-debug-modules-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-debug-modules-extra-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-debuginfo-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-debuginfo-common-s390x-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-devel-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-headers-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-modules-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-modules-extra-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-tools-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-tools-debuginfo-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-zfcpdump-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-zfcpdump-core-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-zfcpdump-debuginfo-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-zfcpdump-devel-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-zfcpdump-modules-4.18.0-193.98.1.el8_2.s390x.rpm
kernel-zfcpdump-modules-extra-4.18.0-193.98.1.el8_2.s390x.rpm
perf-4.18.0-193.98.1.el8_2.s390x.rpm
perf-debuginfo-4.18.0-193.98.1.el8_2.s390x.rpm
python3-perf-4.18.0-193.98.1.el8_2.s390x.rpm
python3-perf-debuginfo-4.18.0-193.98.1.el8_2.s390x.rpm

x86_64:
bpftool-4.18.0-193.98.1.el8_2.x86_64.rpm
bpftool-debuginfo-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-core-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-cross-headers-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-debug-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-debug-core-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-debug-debuginfo-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-debug-devel-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-debug-modules-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-debug-modules-extra-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-debuginfo-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-debuginfo-common-x86_64-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-devel-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-headers-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-modules-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-modules-extra-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-tools-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-tools-debuginfo-4.18.0-193.98.1.el8_2.x86_64.rpm
kernel-tools-libs-4.18.0-193.98.1.el8_2.x86_64.rpm
perf-4.18.0-193.98.1.el8_2.x86_64.rpm
perf-debuginfo-4.18.0-193.98.1.el8_2.x86_64.rpm
python3-perf-4.18.0-193.98.1.el8_2.x86_64.rpm
python3-perf-debuginfo-4.18.0-193.98.1.el8_2.x86_64.rpm

Red Hat Enterprise Linux BaseOS E4S (v. 8.2):

Source:
kernel-4.18.0-193.98.1.el8_2.src.rpm

noarch:
kernel-abi-whitelists-4.18.0-193.98.1.el8_2.noarch.rpm
kernel-doc-4.18.0-193.98.1.el8_2.noarch.rpm

Red Hat Enterprise Linux BaseOS TUS (v. 8.2):

Source:
kernel-4.18.0-193.98.1.el8_2.src.rpm

noarch:
kernel-abi-whitelists-4.18.0-193.98.1.el8_2.noarch.rpm
kernel-doc-4.18.0-193.98.1.el8_2.noarch.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

References:

https://access.redhat.com/security/cve/CVE-2022-2964
https://access.redhat.com/security/updates/classification/#important

Contact:

The Red Hat security contact is [email protected]. More contact
details at https://access.redhat.com/security/team/contact/
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VZTS
-----END PGP SIGNATURE-----
–
RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Dell VxRail versions earlier than 7.0.450, contain(s) an OS command injection vulnerability in VxRail Manager. A local authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.

1 year ago

CVE

Open in Source

#vulnerability #ios #intel #vmware #bios #auth #dell

Red Hat Security Advisory 2023-1192-01

Red Hat Security Advisory 2023-1192-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Issues addressed include a use-after-free vulnerability.

1 year ago

Packet Storm

Open in Source

#vulnerability #linux #red_hat #rpm

Red Hat Security Advisory 2023-1130-01

Red Hat Security Advisory 2023-1130-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include null pointer and use-after-free vulnerabilities.

1 year ago

Packet Storm

Open in Source

#vulnerability #mac #linux #red_hat #intel #ibm #sap

Red Hat Security Advisory 2023-0858-01

Red Hat Security Advisory 2023-0858-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Issues addressed include a use-after-free vulnerability.

1 year ago

Packet Storm

Open in Source

#vulnerability #linux #red_hat #js #rpm #sap

RHSA-2023:0856: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes. * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in ho...

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #sap

RHSA-2023:0794: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.4 bug fixes and security updates

Red Hat Advanced Cluster Management for Kubernetes 2.6.4 General Availability release images, which fix bugs and update container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-24999: qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload i...

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #red_hat #kubernetes #auth

Red Hat Security Advisory 2023-0499-01

Red Hat Security Advisory 2023-0499-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.

1 year ago

Packet Storm

Open in Source

#vulnerability #linux #red_hat #rpm

RHSA-2023:0536: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device. * CVE-2022-4139: kernel: i915: Incorrect GPU TLB flush can lead to random memory access

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #web #linux #red_hat #nodejs #js #java #kubernetes #aws #rpm #sap

RHSA-2023:0496: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device. * CVE-2022-4139: kernel: i915: Incorrect GPU TLB flush can lead to random memory access

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #ibm #sap

Red Hat Security Advisory 2023-0399-01

Red Hat Security Advisory 2023-0399-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system.

1 year ago

Packet Storm

Open in Source

#vulnerability #linux #red_hat #js

Red Hat Security Advisory 2023-0404-01

Red Hat Security Advisory 2023-0404-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.

1 year ago

Packet Storm

Open in Source

#vulnerability #linux #red_hat #nodejs #js #rpm

Red Hat Security Advisory 2023-0396-01

Red Hat Security Advisory 2023-0396-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.

1 year ago

Packet Storm

Open in Source

#vulnerability #linux #red_hat #rpm #sap

Red Hat Security Advisory 2023-0392-01

Red Hat Security Advisory 2023-0392-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

1 year ago

Packet Storm

Open in Source

#vulnerability #linux #red_hat

RHSA-2023:0399: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-26401: hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device.

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #ibm

RHSA-2023:0395: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device.

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #sap

RHSA-2023:0348: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2959: kernel: watch queue race condition can lead to privilege escalation * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device. * CVE-2022-4139: kernel: i915: Incorrect GPU TLB flush can lead to random memory access * CVE-2022-43945: kernel: nfsd buffer overflow by RPC message over TCP with garbage data

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #web #linux #red_hat #nodejs #js #java #kubernetes #aws #buffer_overflow #rpm

RHSA-2023:0300: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2959: kernel: watch queue race condition can lead to privilege escalation * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device. * CVE-2022-3077: kernel: i2c: unbounded length leads to buffer overflow in ismt_access() * CVE-2022-4139: kernel: i915: Incorrect GPU TLB flush can lead to random memory access * CVE-2022-3059...

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #web #linux #red_hat #nodejs #js #java #kubernetes #aws #buffer_overflow #dell

RHSA-2023:0334: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2959: kernel: watch queue race condition can lead to privilege escalation * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device. * CVE-2022-3077: kernel: i2c: unbounded length leads to buffer overflow in ismt_access() * CVE-2022-4139: kernel: i915: Incorrect GPU TLB flush can lead to random memory access * CVE-2022-30594: ...

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #ios #linux #red_hat #intel #perl #amd #bios #buffer_overflow #ibm #dell

Red Hat Security Advisory 2023-0114-01

Red Hat Security Advisory 2023-0114-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

1 year ago

Packet Storm

Open in Source

#vulnerability #linux #red_hat #js #ssh #dell

Red Hat Security Advisory 2023-0123-01

Red Hat Security Advisory 2023-0123-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel.

1 year ago

Packet Storm

Open in Source

#vulnerability #linux #red_hat #rpm

RHSA-2023:0101: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device. * CVE-2022-4139: kernel: i915: Incorrect GPU TLB flush can lead to random memory access

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #intel #perl #lenovo #amd #ibm #dell

RHSA-2023:0123: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device. * CVE-2022-4139: kernel: i915: Incorrect GPU TLB flush can lead to random memory access

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #web #linux #red_hat #nodejs #js #java #kubernetes #aws #rpm

Ubuntu Security Notice USN-5650-1

Ubuntu Security Notice 5650-1 - It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.

2 years ago

Packet Storm

Open in Source

#vulnerability #web #amazon #ubuntu #linux #dos #perl #aws

CVE-2022-2964: Invalid Bug ID

A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.

2 years ago

CVE

Open in Source

#vulnerability #linux