Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
219
security advisorydenial of servicebug fixRocky Linux 9: RLEA-2024:7620 critical: microcode_ctl enhancement update
microcode_ctl bug fix and enhancement update . {"type":"TYPE_ENHANCEMENT","shortCode":"RL","name":"RLEA-2024:7620","synopsis":"microcode_ctl bug fix and enhancement update","severity":"SEVERITY_UNKNOWN","topic":"An update is available for microcode_ctl.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The microcode_ctl packages provide microcode updates for Intel and AMD processors.\n\nBug Fix(es) and Enhancement(s):\n\n* microcode_ctl: kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) [rhel-9.4.0] (JIRA:Rocky Linux-30860)\n\n* microcode_ctl: kernel: Local information disclosure on Intel(R) Atom(R) processors [rhel-9.4.0] (JIRA:Rocky Linux-30863)\n\n* microcode_ctl: kernel: Local information disclosure in some Intel(R) processors [rhel-9.4.0] (JIRA:Rocky Linux-30866)\n\n* microcode_ctl: kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode [rhel-9.4.0] (JIRA:Rocky Linux-30869)\n\n* microcode_ctl: kernel: Possible Denial of Service on Intel(R) Processors [rhel-9.4.0] (JIRA:Rocky Linux-30872)\n\n* microcode_ctl: kernel: Local information disclosure on Intel(R) Atom(R) processors [rhel-9.4.z] (JIRA:Rocky Linux-48717)","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[],"cves":[],"references":[],"publishedAt":"2024-10-25T17:17:21.103333Z","rpms":{"Rocky Linux 9":{"nvras":["microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch.rpm","microcode_ctl-4:20230808-2.20240531.1.el9_4.src.rpm"]}},"rebootSuggested":false,"buildReferences":[]} . Rocky Linux release fixes microcode_ctl issues and improves overall performance, maintaining security and reliability for its users.. microcode_ctl, Rocky Linux update, processor bug fix, system enhancement. . Severity: Critical. LinuxSecurity.com Team
Oct 25, 2024
•Critical
Rocky Linux
100
security advisorykernel updateremote code executionSUSE: 2022:3704-1 Important: Kernel Update Addresses Major Threats
An update that solves 15 vulnerabilities, contains one feature and has three fixes is now available. . SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3704-1 Rating: important References: #1177471 #1199564 #1200288 #1201309 #1201310 #1202095 #1202385 #1202677 #1202960 #1203552 #1203622 #1203769 #1203770 #1203987 #1203992 #1204051 #1204059 #1204060 PED-529 Cross-References: CVE-2020-16119 CVE-2022-20008 CVE-2022-2503 CVE-2022-2586 CVE-2022-32296 CVE-2022-3239 CVE-2022-3303 CVE-2022-41218 CVE-2022-41222 CVE-2022-41674 CVE-2022-41848 CVE-2022-41849 CVE-2022-42719 CVE-2022-42720 CVE-2022-42721 CVSS scores: CVE-2020-16119 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-16119 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-20008 (NVD) : 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-20008 (SUSE): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2022-2503 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-2503 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-2586 (SUSE): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-32296 (NVD) : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2022-32296 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-3239 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-3239 (SUSE): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-3303 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-3303 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2022-41218 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-41218 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-41222 (NVD) : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-41222 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-41674 (NVD) : 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-41674 (SUSE): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-41848 (NVD) : 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-41848 (SUSE): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-41849 (NVD) : 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-41849 (SUSE): 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-42719 (NVD) : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-42719 (SUSE): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-42720 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-42720 (SUSE): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-42721 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-42721 (SUSE): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise High Availability 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise Module for Live Patching 15-SP2 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 ______________________________________________________________________________ An update that solves 15 vulnerabilities, contains one feature and has three fixes is now available. Description: The SUSE Linux Enterprise 15 SP2 kernel was updated. The following security bugs were fixed: - CVE-2020-16119: Fixed a use-after-free vulnerability exploitable by a local attacker due to reuse of a DCCP socket. (bnc#1177471) - CVE-2022-20008: Fixed a bug which allowed to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. (bnc#1199564) - CVE-2022-2503: Fixed a bug in dm-verity, device-mapper table reloads allowed users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allowed root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates (bnc#1202677). - CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bnc#1202095). - CVE-2022-32296: Fixed a bug which allowed TCP servers to identify clients by observing what source ports are used (bnc#1200288). - CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalatetheir privileges (bnc#1203552). - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960). - CVE-2022-41222: Fixed a use-after-free via a stale TLB because an rmap lock is not held during a PUD move (bnc#1203622). - CVE-2022-41674: Fixed a DoS issue where kernel can crash on the reception of specific WiFi Frames (bsc#1203770). - CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987). - CVE-2022-41849: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open (bnc#1203992). - CVE-2022-42719: Fixed remote code execution with wlan frames when parsing a multi-BSSID element (bsc#1204051). - CVE-2022-42720: Fixed remote code execution due to refcounting bugs (bsc#1204059). - CVE-2022-42721: Fixed remote code execution due list corruption in the wlan stack (bsc#1204060). The following non-security bugs were fixed: - net: mana: Add support of XDP_REDIRECT action (bsc#1201310, jsc#PED-529). - net: mana: Add the Linux MANA PF driver (bsc#1201309, jsc#PED-529). - x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still work so that it can be disabled. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3704=1 - SUSEManager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3704=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3704=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3704=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3704=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3704=1 - SUSE Linux Enterprise Module for Live Patching 15-SP2: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2022-3704=1 Please note that this is the initial kernel livepatch without fixes itself, this livepatch package is later updated by seperate standalone livepatch updates. - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3704=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3704=1 - SUSE Linux Enterprise High Availability 15-SP2: zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2022-3704=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-3704=1 Package List: - SUSE Manager Server 4.1 (ppc64le s390x x86_64): kernel-default-5.3.18-150200.24.134.1 kernel-default-base-5.3.18-150200.24.134.1.150200.9.63.2 kernel-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debugsource-5.3.18-150200.24.134.1 kernel-default-devel-5.3.18-150200.24.134.1 kernel-default-devel-debuginfo-5.3.18-150200.24.134.1 kernel-obs-build-5.3.18-150200.24.134.1 kernel-obs-build-debugsource-5.3.18-150200.24.134.1 kernel-syms-5.3.18-150200.24.134.1 reiserfs-kmp-default-5.3.18-150200.24.134.1 reiserfs-kmp-default-debuginfo-5.3.18-150200.24.134.1 - SUSE Manager Server 4.1 (noarch): kernel-devel-5.3.18-150200.24.134.1 kernel-docs-5.3.18-150200.24.134.1 kernel-macros-5.3.18-150200.24.134.1 kernel-source-5.3.18-150200.24.134.1 - SUSE Manager Server 4.1 (x86_64): kernel-preempt-5.3.18-150200.24.134.1 kernel-preempt-debuginfo-5.3.18-150200.24.134.1 kernel-preempt-debugsource-5.3.18-150200.24.134.1 kernel-preempt-devel-5.3.18-150200.24.134.1 kernel-preempt-devel-debuginfo-5.3.18-150200.24.134.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): kernel-default-5.3.18-150200.24.134.1 kernel-default-base-5.3.18-150200.24.134.1.150200.9.63.2 kernel-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debugsource-5.3.18-150200.24.134.1 kernel-default-devel-5.3.18-150200.24.134.1 kernel-default-devel-debuginfo-5.3.18-150200.24.134.1 kernel-obs-build-5.3.18-150200.24.134.1 kernel-obs-build-debugsource-5.3.18-150200.24.134.1 kernel-preempt-5.3.18-150200.24.134.1 kernel-preempt-debuginfo-5.3.18-150200.24.134.1 kernel-preempt-debugsource-5.3.18-150200.24.134.1 kernel-preempt-devel-5.3.18-150200.24.134.1 kernel-preempt-devel-debuginfo-5.3.18-150200.24.134.1 kernel-syms-5.3.18-150200.24.134.1 reiserfs-kmp-default-5.3.18-150200.24.134.1 reiserfs-kmp-default-debuginfo-5.3.18-150200.24.134.1 - SUSE Manager Retail Branch Server 4.1 (noarch): kernel-devel-5.3.18-150200.24.134.1 kernel-docs-5.3.18-150200.24.134.1 kernel-macros-5.3.18-150200.24.134.1 kernel-source-5.3.18-150200.24.134.1 - SUSE Manager Proxy 4.1 (noarch): kernel-devel-5.3.18-150200.24.134.1 kernel-docs-5.3.18-150200.24.134.1 kernel-macros-5.3.18-150200.24.134.1 kernel-source-5.3.18-150200.24.134.1 - SUSE Manager Proxy 4.1 (x86_64): kernel-default-5.3.18-150200.24.134.1 kernel-default-base-5.3.18-150200.24.134.1.150200.9.63.2 kernel-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debugsource-5.3.18-150200.24.134.1 kernel-default-devel-5.3.18-150200.24.134.1 kernel-default-devel-debuginfo-5.3.18-150200.24.134.1 kernel-obs-build-5.3.18-150200.24.134.1 kernel-obs-build-debugsource-5.3.18-150200.24.134.1 kernel-preempt-5.3.18-150200.24.134.1 kernel-preempt-debuginfo-5.3.18-150200.24.134.1 kernel-preempt-debugsource-5.3.18-150200.24.134.1 kernel-preempt-devel-5.3.18-150200.24.134.1 kernel-preempt-devel-debuginfo-5.3.18-150200.24.134.1 kernel-syms-5.3.18-150200.24.134.1 reiserfs-kmp-default-5.3.18-150200.24.134.1 reiserfs-kmp-default-debuginfo-5.3.18-150200.24.134.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): kernel-default-5.3.18-150200.24.134.1 kernel-default-base-5.3.18-150200.24.134.1.150200.9.63.2 kernel-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debugsource-5.3.18-150200.24.134.1 kernel-default-devel-5.3.18-150200.24.134.1 kernel-default-devel-debuginfo-5.3.18-150200.24.134.1 kernel-obs-build-5.3.18-150200.24.134.1 kernel-obs-build-debugsource-5.3.18-150200.24.134.1 kernel-syms-5.3.18-150200.24.134.1 reiserfs-kmp-default-5.3.18-150200.24.134.1 reiserfs-kmp-default-debuginfo-5.3.18-150200.24.134.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): kernel-devel-5.3.18-150200.24.134.1 kernel-docs-5.3.18-150200.24.134.1 kernel-macros-5.3.18-150200.24.134.1 kernel-source-5.3.18-150200.24.134.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64): kernel-preempt-5.3.18-150200.24.134.1 kernel-preempt-debuginfo-5.3.18-150200.24.134.1 kernel-preempt-debugsource-5.3.18-150200.24.134.1 kernel-preempt-devel-5.3.18-150200.24.134.1 kernel-preempt-devel-debuginfo-5.3.18-150200.24.134.1 - SUSE Linux Enterprise Server15-SP2-LTSS (aarch64 ppc64le s390x x86_64): kernel-default-5.3.18-150200.24.134.1 kernel-default-base-5.3.18-150200.24.134.1.150200.9.63.2 kernel-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debugsource-5.3.18-150200.24.134.1 kernel-default-devel-5.3.18-150200.24.134.1 kernel-default-devel-debuginfo-5.3.18-150200.24.134.1 kernel-obs-build-5.3.18-150200.24.134.1 kernel-obs-build-debugsource-5.3.18-150200.24.134.1 kernel-syms-5.3.18-150200.24.134.1 reiserfs-kmp-default-5.3.18-150200.24.134.1 reiserfs-kmp-default-debuginfo-5.3.18-150200.24.134.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 x86_64): kernel-preempt-5.3.18-150200.24.134.1 kernel-preempt-debuginfo-5.3.18-150200.24.134.1 kernel-preempt-debugsource-5.3.18-150200.24.134.1 kernel-preempt-devel-5.3.18-150200.24.134.1 kernel-preempt-devel-debuginfo-5.3.18-150200.24.134.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): kernel-devel-5.3.18-150200.24.134.1 kernel-docs-5.3.18-150200.24.134.1 kernel-macros-5.3.18-150200.24.134.1 kernel-source-5.3.18-150200.24.134.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): kernel-default-5.3.18-150200.24.134.1 kernel-default-base-5.3.18-150200.24.134.1.150200.9.63.2 kernel-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debugsource-5.3.18-150200.24.134.1 kernel-default-devel-5.3.18-150200.24.134.1 kernel-default-devel-debuginfo-5.3.18-150200.24.134.1 kernel-obs-build-5.3.18-150200.24.134.1 kernel-obs-build-debugsource-5.3.18-150200.24.134.1 kernel-preempt-5.3.18-150200.24.134.1 kernel-preempt-debuginfo-5.3.18-150200.24.134.1 kernel-preempt-debugsource-5.3.18-150200.24.134.1 kernel-preempt-devel-5.3.18-150200.24.134.1 kernel-preempt-devel-debuginfo-5.3.18-150200.24.134.1 kernel-syms-5.3.18-150200.24.134.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): kernel-devel-5.3.18-150200.24.134.1 kernel-docs-5.3.18-150200.24.134.1 kernel-macros-5.3.18-150200.24.134.1 kernel-source-5.3.18-150200.24.134.1 - SUSE Linux Enterprise Module for Live Patching 15-SP2 (ppc64le s390x x86_64): kernel-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debugsource-5.3.18-150200.24.134.1 kernel-default-livepatch-5.3.18-150200.24.134.1 kernel-default-livepatch-devel-5.3.18-150200.24.134.1 kernel-livepatch-5_3_18-150200_24_134-default-1-150200.5.3.2 kernel-livepatch-5_3_18-150200_24_134-default-debuginfo-1-150200.5.3.2 kernel-livepatch-SLE15-SP2_Update_31-debugsource-1-150200.5.3.2 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): kernel-default-5.3.18-150200.24.134.1 kernel-default-base-5.3.18-150200.24.134.1.150200.9.63.2 kernel-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debugsource-5.3.18-150200.24.134.1 kernel-default-devel-5.3.18-150200.24.134.1 kernel-default-devel-debuginfo-5.3.18-150200.24.134.1 kernel-obs-build-5.3.18-150200.24.134.1 kernel-obs-build-debugsource-5.3.18-150200.24.134.1 kernel-preempt-5.3.18-150200.24.134.1 kernel-preempt-debuginfo-5.3.18-150200.24.134.1 kernel-preempt-debugsource-5.3.18-150200.24.134.1 kernel-preempt-devel-5.3.18-150200.24.134.1 kernel-preempt-devel-debuginfo-5.3.18-150200.24.134.1 kernel-syms-5.3.18-150200.24.134.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): kernel-devel-5.3.18-150200.24.134.1 kernel-docs-5.3.18-150200.24.134.1 kernel-macros-5.3.18-150200.24.134.1 kernel-source-5.3.18-150200.24.134.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): kernel-default-5.3.18-150200.24.134.1 kernel-default-base-5.3.18-150200.24.134.1.150200.9.63.2 kernel-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debugsource-5.3.18-150200.24.134.1 kernel-default-devel-5.3.18-150200.24.134.1 kernel-default-devel-debuginfo-5.3.18-150200.24.134.1 kernel-obs-build-5.3.18-150200.24.134.1 kernel-obs-build-debugsource-5.3.18-150200.24.134.1 kernel-preempt-5.3.18-150200.24.134.1 kernel-preempt-debuginfo-5.3.18-150200.24.134.1 kernel-preempt-debugsource-5.3.18-150200.24.134.1 kernel-preempt-devel-5.3.18-150200.24.134.1 kernel-preempt-devel-debuginfo-5.3.18-150200.24.134.1 kernel-syms-5.3.18-150200.24.134.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): kernel-devel-5.3.18-150200.24.134.1 kernel-docs-5.3.18-150200.24.134.1 kernel-macros-5.3.18-150200.24.134.1 kernel-source-5.3.18-150200.24.134.1 - SUSE Linux Enterprise High Availability 15-SP2 (aarch64 ppc64le s390x x86_64): cluster-md-kmp-default-5.3.18-150200.24.134.1 cluster-md-kmp-default-debuginfo-5.3.18-150200.24.134.1 dlm-kmp-default-5.3.18-150200.24.134.1 dlm-kmp-default-debuginfo-5.3.18-150200.24.134.1 gfs2-kmp-default-5.3.18-150200.24.134.1 gfs2-kmp-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debugsource-5.3.18-150200.24.134.1 ocfs2-kmp-default-5.3.18-150200.24.134.1 ocfs2-kmp-default-debuginfo-5.3.18-150200.24.134.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): kernel-default-5.3.18-150200.24.134.1 kernel-default-base-5.3.18-150200.24.134.1.150200.9.63.2 kernel-default-debuginfo-5.3.18-150200.24.134.1 kernel-default-debugsource-5.3.18-150200.24.134.1 kernel-default-devel-5.3.18-150200.24.134.1 kernel-default-devel-debuginfo-5.3.18-150200.24.134.1 kernel-obs-build-5.3.18-150200.24.134.1 kernel-obs-build-debugsource-5.3.18-150200.24.134.1 kernel-preempt-5.3.18-150200.24.134.1 kernel-preempt-debuginfo-5.3.18-150200.24.134.1 kernel-preempt-debugsource-5.3.18-150200.24.134.1 kernel-preempt-devel-5.3.18-150200.24.134.1 kernel-preempt-devel-debuginfo-5.3.18-150200.24.134.1 kernel-syms-5.3.18-150200.24.134.1 reiserfs-kmp-default-5.3.18-150200.24.134.1 reiserfs-kmp-default-debuginfo-5.3.18-150200.24.134.1 - SUSE Enterprise Storage 7 (noarch): kernel-devel-5.3.18-150200.24.134.1 kernel-docs-5.3.18-150200.24.134.1 kernel-macros-5.3.18-150200.24.134.1 kernel-source-5.3.18-150200.24.134.1 References: https://www.suse.com/security/cve/CVE-2020-16119.html https://www.suse.com/security/cve/CVE-2022-20008.html https://www.suse.com/security/cve/CVE-2022-2503.html https://www.suse.com/security/cve/CVE-2022-2586.html https://www.suse.com/security/cve/CVE-2022-32296.html https://www.suse.com/security/cve/CVE-2022-3239.html https://www.suse.com/security/cve/CVE-2022-3303.html https://www.suse.com/security/cve/CVE-2022-41218.html https://www.suse.com/security/cve/CVE-2022-41222.html https://www.suse.com/security/cve/CVE-2022-41674.html https://www.suse.com/security/cve/CVE-2022-41848.html https://www.suse.com/security/cve/CVE-2022-41849.html https://www.suse.com/security/cve/CVE-2022-42719.html https://www.suse.com/security/cve/CVE-2022-42720.html https://www.suse.com/security/cve/CVE-2022-42721.html https://bugzilla.suse.com/1177471 https://bugzilla.suse.com/1199564 https://bugzilla.suse.com/1200288 https://bugzilla.suse.com/1201309 https://bugzilla.suse.com/1201310 https://bugzilla.suse.com/1202095 https://bugzilla.suse.com/1202385 https://bugzilla.suse.com/1202677 https://bugzilla.suse.com/1202960 https://bugzilla.suse.com/1203552 https://bugzilla.suse.com/1203622 https://bugzilla.suse.com/1203769 https://bugzilla.suse.com/1203770 https://bugzilla.suse.com/1203987 https://bugzilla.suse.com/1203992 https://bugzilla.suse.com/1204051 https://bugzilla.suse.com/1204059 https://bugzilla.suse.com/1204060 . SUSE Security Patch for Linux Kernel addresses 15 vulnerabilities, enhances security measures, and mandates a system restart.. SUSE Security Update,Linux Kernel,remote code execution,local information disclosure,security fixes. . Severity: Important. LinuxSecurity.com Team
Oct 24, 2022
•Important
SuSE
197
security advisorycriticaldebianUbuntu 20.04 Focal: USN-4531-2 Severe: VLC Buffer Overflow
In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. . - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3094-1
Sep 03, 2022
•Important
Debian LTS
203
security advisorycritical issuemageiaMageia 8: MGASA-2022-0085 Critical Flac Local Info Disclosure
In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. (CVE-2021-0561) . MGASA-2022-0085 - Updated flac packages fix security vulnerability Publication date: 06 Mar 2022 URL: https://advisories.mageia.org/MGASA-2022-0085.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-0561 In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. (CVE-2021-0561) References: - https://bugs.mageia.org/show_bug.cgi?id=30098 - https://lists.fedoraproject.org/archives/list/
Mar 06, 2022
•Critical
Mageia
100
security advisoryprivilege escalationkernel patchSUSE: 2021:2377-1 Important: Kernel Live Patch Privilege Escalation Threat
An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP2) ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:2377-1 Rating: important References: #1185901 #1187597 #1187687 Cross-References: CVE-2021-0512 CVE-2021-0605 CVE-2021-23133 CVSS scores: CVE-2021-0512 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-0605 (NVD) : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N CVE-2021-0605 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-23133 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-23133 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Module for Live Patching 15-SP2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for the Linux Kernel 5.3.18-24_9 fixes several issues. The following security issues were fixed: - CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187687) - CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597) - CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for yourproduct: - SUSE Linux Enterprise Module for Live Patching 15-SP2: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2021-2377=1 SUSE-SLE-Module-Live-Patching-15-SP2-2021-2383=1 Package List: - SUSE Linux Enterprise Module for Live Patching 15-SP2 (ppc64le s390x x86_64): kernel-livepatch-5_3_18-22-default-13-5.2 kernel-livepatch-5_3_18-22-default-debuginfo-13-5.2 kernel-livepatch-5_3_18-24_9-default-12-2.2 kernel-livepatch-5_3_18-24_9-default-debuginfo-12-2.2 kernel-livepatch-SLE15-SP2_Update_0-debugsource-13-5.2 kernel-livepatch-SLE15-SP2_Update_1-debugsource-12-2.2 References: https://www.suse.com/security/cve/CVE-2021-0512.html https://www.suse.com/security/cve/CVE-2021-0605.html https://www.suse.com/security/cve/CVE-2021-23133.html https://bugzilla.suse.com/1185901 https://bugzilla.suse.com/1187597 https://bugzilla.suse.com/1187687 . SUSE has released a Security Update addressing multiple vulnerabilities in the Linux Kernel (Live Patch 1 for SLE 15 SP2), including detailed installation procedures.. Kernel Patch, Live Patching, SUSE Update. . Severity: Important. LinuxSecurity.com Team
Jul 16, 2021
•Important
SuSE
87
security advisorycode executiondebianDebian: DSA-4304-1 Critical Firefox-ESR Code Execution Threats
Two security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code and local information disclosure. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4304-1
Sep 23, 2018
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!