Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
217

Oracle Linux 10 Corosync Moderate Integer Overflow Issues ELSA-2026-13644

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-13644 http://linux.oracle.com/errata/ELSA-2026-13644.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: corosync-vqsim-3.1.9-2.el10_1.1.x86_64.rpm corosynclib-3.1.9-2.el10_1.1.x86_64.rpm aarch64: corosync-vqsim-3.1.9-2.el10_1.1.aarch64.rpm corosynclib-3.1.9-2.el10_1.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/corosync-3.1.9-2.el10_1.1.src.rpm Related CVEs: CVE-2026-35091 CVE-2026-35092 Description of changes: [3.1.9-2.1] - Resolves: RHEL-163801 - Resolves: RHEL-163822 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 10 receives updates for corosync addressing moderate issues, including integer overflow and sanity checks.. Oracle Linux, corosync, security patch, intermediate threats, RPM updates. . LinuxSecurity.com Team

Calendar 2 May 14, 2026 Oracle
219

Rocky Linux 10 RLSA-2026-9272 Important Flaw Fixed in Core Kernel Elements

Important: kernel security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:9264", "synopsis": "Important: kernel security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for kernel.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)\n\n* kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2394648", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2394648", "description": ""}, {"ticket": "2425046", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2425046", "description": ""}], "cves": [{"name": "CVE-2025-39766", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39766", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "cvss3BaseScore": "7.3", "cwe": "CWE-390"}, {"name": "CVE-2025-68741", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68741", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "cvss3BaseScore": "7.3", "cwe": "CWE-763"}], "references": [], "publishedAt": "2026-04-28T12:06:44.835475Z", "rpms": {"Rocky Linux 10": {"nvras": ["kernel-rt-modules-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-debug-devel-matched-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-core-0:6.12.0-124.52.1.el10_1.ppc64le.rpm","kernel-modules-core-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-debug-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-zfcpdump-0:6.12.0-124.52.1.el10_1.s390x.rpm", "perf-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-uki-virt-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-debug-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-tools-libs-devel-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-rt-debug-modules-extra-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-rt-64k-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-devel-matched-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-debug-modules-extra-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-64k-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-modules-extra-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-64k-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debuginfo-common-x86_64-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-rt-modules-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debuginfo-common-s390x-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-64k-debug-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-devel-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "libperf-debuginfo-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "perf-debuginfo-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-debug-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-zfcpdump-modules-extra-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-rt-64k-debug-modules-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-tools-debuginfo-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-debug-devel-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-modules-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-uki-virt-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-uki-virt-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-zfcpdump-devel-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-debug-core-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-tools-libs-devel-0:6.12.0-124.52.1.el10_1.ppc64le.rpm","kernel-rt-devel-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "rtla-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "python3-perf-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-tools-debuginfo-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-debug-core-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "libperf-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "libperf-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "python3-perf-debuginfo-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-debug-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-64k-debug-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-modules-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-rt-core-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-64k-devel-matched-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-debuginfo-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-devel-matched-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-debuginfo-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-rt-modules-extra-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "python3-perf-debuginfo-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-rt-debug-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "rv-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-modules-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-debuginfo-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-modules-extra-matched-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-0:6.12.0-124.52.1.el10_1.src.rpm", "kernel-modules-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-tools-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "rtla-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "perf-debuginfo-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-64k-modules-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-debug-core-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-debug-devel-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "perf-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-tools-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-rt-64k-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-tools-libs-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-64k-debug-modules-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm","kernel-modules-extra-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-devel-matched-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-64k-debug-devel-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-zfcpdump-debuginfo-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-debug-modules-core-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "python3-perf-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-devel-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-64k-modules-extra-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-64k-debug-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-modules-extra-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debuginfo-common-ppc64le-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-debug-modules-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "libperf-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "python3-perf-debuginfo-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-tools-libs-devel-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-modules-extra-matched-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-tools-debuginfo-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-rt-64k-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-debug-modules-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-debug-core-0:6.12.0-124.52.1.el10_1.s390x.rpm", "rtla-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-devel-matched-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-modules-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-rt-64k-debug-modules-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-debug-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-modules-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-64k-debug-modules-extra-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-uki-virt-addons-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-64k-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debuginfo-common-aarch64-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-modules-core-0:6.12.0-124.52.1.el10_1.s390x.rpm","kernel-modules-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-debuginfo-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-rt-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-debug-modules-extra-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "libperf-debuginfo-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-modules-core-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-modules-extra-matched-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-core-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-debug-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-64k-debug-modules-extra-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-64k-modules-extra-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-debug-debuginfo-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "rv-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-debug-devel-matched-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-64k-debug-modules-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-zfcpdump-devel-matched-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-tools-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-uki-virt-addons-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-tools-libs-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "python3-perf-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-64k-debug-devel-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "perf-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "rtla-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-doc-0:6.12.0-124.52.1.el10_1.noarch.rpm", "python3-perf-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-devel-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-rt-debug-modules-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-devel-matched-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-modules-extra-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-modules-extra-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-zfcpdump-modules-core-0:6.12.0-124.52.1.el10_1.s390x.rpm","libperf-debuginfo-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-debug-debuginfo-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-rt-64k-devel-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-devel-0:6.12.0-124.52.1.el10_1.s390x.rpm", "perf-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-tools-0:6.12.0-124.52.1.el10_1.s390x.rpm", "libperf-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-debug-modules-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-tools-libs-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-zfcpdump-core-0:6.12.0-124.52.1.el10_1.s390x.rpm", "perf-debuginfo-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-modules-extra-matched-0:6.12.0-124.52.1.el10_1.s390x.rpm", "libperf-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-rt-64k-modules-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-zfcpdump-modules-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-rt-64k-debug-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-64k-debug-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-debug-modules-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-64k-debug-devel-matched-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-modules-extra-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "perf-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-debug-devel-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "python3-perf-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-devel-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "rv-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-abi-stablelists-0:6.12.0-124.52.1.el10_1.noarch.rpm", "kernel-rt-debug-modules-core-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-debug-modules-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-rt-debug-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-core-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-64k-modules-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-rt-64k-modules-0:6.12.0-124.52.1.el10_1.aarch64.rpm","kernel-rt-64k-debug-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-devel-matched-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-rt-modules-core-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-rt-debug-core-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-modules-core-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-rt-debug-devel-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-debug-modules-core-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "kernel-rt-debug-devel-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-modules-extra-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-debuginfo-0:6.12.0-124.52.1.el10_1.s390x.rpm", "kernel-modules-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-tools-debuginfo-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-devel-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-debug-debuginfo-0:6.12.0-124.52.1.el10_1.ppc64le.rpm", "rv-0:6.12.0-124.52.1.el10_1.x86_64.rpm", "kernel-64k-devel-0:6.12.0-124.52.1.el10_1.aarch64.rpm", "kernel-modules-extra-0:6.12.0-124.52.1.el10_1.s390x.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important kernel security update is available for Rocky Linux 10 addressing significant issues including CVE-2025-39766.. kernel security update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Apr 28, 2026 Important Rocky Linux
203

Mageia 8 MGASA-2021-0409 Moderate: Kernel Security Issues Overview

This kernel update is based on upstream 5.10.60 and fixes atleast the following security issues: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a . MGASA-2021-0409 - Updated kernel packages fix security vulnerabilities Publication date: 23 Aug 2021 URL: https://advisories.mageia.org/MGASA-2021-0409.html Type: security Affected Mageia releases: 8 CVE: CVE-2020-3702, CVE-2021-3653, CVE-2021-3656, CVE-2021-38205 This kernel update is based on upstream 5.10.60 and fixes atleast the following security issues: Specifically timed and handcrafted traffic can cause internal errorsin a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic in ath9k (CVE-2020-3702). A missing validation of the "int_ctl" VMCB field allows a malicious L1 guest to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. The L2 guest is able to write to a limited but still relatively large subset of the host physical memory, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape (CVE-2021-3653). A missing validation of the the "virt_ext" VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. Under these circumstances, the L2 guest is able to run VMLOAD/VMSAVE unintercepted, and thus read/write portions of the host physical memory, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape (CVE-2021-3656). drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (CVE-2021-38205). Other fixes in this update: - cfi_cmdset_0002: fix crash when erasing/writing AMD cards For other upstream fixes, see the referencedchangelogs. References: - https://bugs.mageia.org/show_bug.cgi?id=29384 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.57 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.58 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.59 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.60 - https://www.cve.org/CVERecord?id=CVE-2020-3702 - https://www.cve.org/CVERecord?id=CVE-2021-3653 - https://www.cve.org/CVERecord?id=CVE-2021-3656 - https://www.cve.org/CVERecord?id=CVE-2021-38205 SRPMS: - 8/core/kernel-5.10.60-2.mga8 - 8/core/kmod-virtualbox-6.1.26-1.2.mga8 - 8/core/kmod-xtables-addons-3.18-1.20.mga8 . The latest kernel patch resolves numerous vulnerabilities affecting wireless connectivity hardware and validation processes for L1 guests, significantly bolstering security measures.. Mageia Security Advisory, Kernel Update, WLAN Security, Internal Error Fixes. . LinuxSecurity.com Team

Calendar 2 Aug 23, 2021 Mageia
203

Mageia 8 MGASA-2021-0104 Moderate Threat: Broadcom Info Leak

Updated nonfree firmwares fixees various issues, adds new / improved hardware support and fixes atleast the following security issue: An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to . MGASA-2021-0104 - Updated nonfree firmware packages fix security vulnerability Publication date: 04 Mar 2021 URL: https://advisories.mageia.org/MGASA-2021-0104.html Type: security Affected Mageia releases: 8 CVE: CVE-2019-15126 Updated nonfree firmwares fixees various issues, adds new / improved hardware support and fixes atleast the following security issue: An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic (CVE-2019-15126). Full list of updates: * kernel-firmware-nonfree: - add firmware for Lontium LT9611UXC DSI to HDMI bridge - brcm: Add NVRAM for Vamrs 96boards Rock960 - brcm: make AP6212 in bananpi m2 plus/zero work - brcm: Link RPi4's WiFi firmware with DMI machine name - brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes - brcm: remove old brcm firmwares that have newer cypress variants (CVE-2019-15126) - cypress: Link the new cypress firmware to the old brcm files (CVE-2019-15126) - i915: Add GuC firmware v49.0.1 for all platforms - i915: Add GuC v49.0.1 for DG1 - i915: Add HuC v7.7.1 for DG1 - i915: Add DMC v2.01 for ADL-S - mediatek: update MT8173 VPU firmware to v1.1.6 - mediatek: add firmware for MT7921 - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304 - qcom: add firmware files for Adreno a650 - qcom: Add SM8250 Audio DSP firmware - qcom: Add SM8250 Compute DSP firmware - qcom: Add venus firmware files for VPU-1.0 * iwlwifi-firmware: - Update firmware for Intel Bluetooth AX200, AX201, AX210 to22.30.0.4 * rtlwifi-firmware: - rtw89: 8852a: add firmware v0.9.12.2 References: - https://bugs.mageia.org/show_bug.cgi?id=28500 - https://www.cve.org/CVERecord?id=CVE-2019-15126 SRPMS: - 8/nonfree/kernel-firmware-nonfree-20210223-1.mga8.nonfree . Recent modifications to nonfree firmware packages address security vulnerabilities on Broadcom devices, improving hardware compatibility and safeguarding functionalities.. Mageia Firmware Update, Nonfree Security, Broadcom Wi-Fi Issue. . LinuxSecurity.com Team

Calendar 2 Mar 04, 2021 Mageia
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here