Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
203
security advisoryupdatekernel fixMageia 7: MGASA-2020-0355 Critical: Kernel Btrfs and Memory Flaws
This update is based on the upstream 5.7.19 kernel and fixes at least the following security issue: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can . MGASA-2020-0355 - Updated kernel and kernel-linus packages fix security vulnerabilities Publication date: 30 Aug 2020 URL: https://advisories.mageia.org/MGASA-2020-0355.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-19448, CVE-2020-14314 This update is based on the upstream 5.7.19 kernel and fixes at least the following security issue: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure (CVE-2019-19448). A memory out-of-bounds read flaw was found in the Linux kernel's ext3/ext4 filesystem, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system availability (CVE-2020-14314). For other upstream fixes and changes in this update, see the referenced changelogs. Also, the wireguard-tools package has been updated to version 1.0.20200827. References: - https://bugs.mageia.org/show_bug.cgi?id=27215 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.15 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.16 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.17 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.18 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.19 - https://access.redhat.com/security/cve/CVE-2020-14314 - - - https://www.cve.org/CVERecord?id=CVE-2019-19448 - https://www.cve.org/CVERecord?id=CVE-2020-14314 SRPMS: - 7/core/kernel-5.7.19-1.mga7 -7/core/kernel-linus-5.7.19-1.mga7 - 7/core/kmod-virtualbox-6.0.24-5.mga7 - 7/core/kmod-xtables-addons-3.10-3.mga7 - 7/core/wireguard-tools-1.0.20200827-1.mga7 . Fedora's software upgrade addresses several vulnerabilities, improving performance and security.. Kernel Security Updates, Mageia Vulnerability Fixes, Btrfs Issues, System Stability. . Severity: Critical. LinuxSecurity.com Team
Aug 30, 2020
•Critical
Mageia
203
security advisorykernel updateDoSMageia: 2020-0183 Critical: Kernel 5.6 Series Security Update
This provides an update to kernel 5.6 series, currently based on upstream 5.6.6 adding support for new hardware and features, and fixes atleast the following security issues: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, . MGASA-2020-0183 - Updated kernel packages fix security vulnerabilities Publication date: 25 Apr 2020 URL: https://advisories.mageia.org/MGASA-2020-0183.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-19377, CVE-2020-11494, CVE-2020-11565, CVE-2020-11608, CVE-2020-11609, CVE-2020-11668 This provides an update to kernel 5.6 series, currently based on upstream 5.6.6 adding support for new hardware and features, and fixes atleast the following security issues: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c (CVE-2019-19377). An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (CVE-2020-11494). An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing (CVE-2020-11565). An issue was discovered in the Linux kernel before 5.6.1. drivers/media/ usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints (CVE-2020-11608). An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/ usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid descriptors, as demonstrated by a NULL pointer dereference (CVE-2020-11609). In the Linux kernel before 5.6.1,drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors(CVE-2020-11668). xtables-addons has been updated to 4.9 for kernel 5.6 series support. For other fixes and changes in this update, see the refenced changelogs. References: - https://bugs.mageia.org/show_bug.cgi?id=26525 - https://kernelnewbies.org/Linux_5.6 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.1 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.2 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.3 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.4 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.5 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.6 - https://www.cve.org/CVERecord?id=CVE-2019-19377 - https://www.cve.org/CVERecord?id=CVE-2020-11494 - https://www.cve.org/CVERecord?id=CVE-2020-11565 - https://www.cve.org/CVERecord?id=CVE-2020-11608 - https://www.cve.org/CVERecord?id=CVE-2020-11609 - https://www.cve.org/CVERecord?id=CVE-2020-11668 SRPMS: - 7/core/kernel-5.6.6-1.mga7 - 7/core/kmod-virtualbox-6.0.20-2.mga7 - 7/core/kmod-xtables-addons-3.9-1.mga7 - 7/core/xtables-addons-3.9-1.mga7 - 7/core/ldetect-lst-0.6.9-1.mga7 . The Kernel 5.6 update for Mageia resolves numerous vulnerabilities that pose risks to both system integrity and overall security.. Mageia Kernel Update, Security Fixes, Kernel Vulnerabilities. . Severity: Critical. LinuxSecurity.com Team
Apr 25, 2020
•Critical
Mageia
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!