p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in linux-lowlatency-hwe-5.15 · Seite 89

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für linux-lowlatency-hwe-5.15: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 4513

  1. CVE-2022-49610

    Mittel · CVSS 5.5EPSS 0,23%Korrektur verfügbar

    KVM: VMX: Prevent RSB underflow before vmenter

    In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Prevent RSB underflow before vmenter On VMX, there are some balanced returns between the time the guest's SPEC_CTRL value is written, and the vmenter. Balanced returns (matched by a preceding call) are usually ok, but it's at least theoretically possible an NMI with a deep call stack could empty the RSB before one of the returns. For maximum paranoia, don't allow *any* returns (balanced or otherwise) between the SPEC_CTRL write and the vmenter. [ bp: Fix 32-bit build. ]

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-46.49~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. CVE-2022-49609

    Mittel · CVSS 5.5EPSS 0,27%Korrektur verfügbar

    power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

    In the Linux kernel, the following vulnerability has been resolved: power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe of_find_matching_node_and_match() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. CVE-2022-49608

    Mittel · CVSS 5.5EPSS 0,27%Korrektur verfügbar

    pinctrl: ralink: Check for null return of devm_kcalloc

    In the Linux kernel, the following vulnerability has been resolved: pinctrl: ralink: Check for null return of devm_kcalloc Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. CVE-2022-49607

    Mittel · CVSS 4.7EPSS 0,19%Korrektur verfügbar

    perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()

    In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() Yang Jihing reported a race between perf_event_set_output() and perf_mmap_close(): CPU1 CPU2 perf_mmap_close(e2) if (atomic_dec_and_test(&e2->rb->mmap_count)) // 1 - > 0 detach_rest = true ioctl(e1, IOC_SET_OUTPUT, e2) perf_event_set_output(e1, e2) ... list_for_each_entry_rcu(e, &e2->rb->event_list, rb_entry) ring_buffer_attach(e, NULL); // e1 isn't yet added and // therefore not detached ring_buffer_attach(e1, e2->rb) li

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. CVE-2022-49606

    Mittel · CVSS 6.7EPSS 0,2%Korrektur verfügbar

    RDMA/irdma: Fix sleep from invalid context BUG

    In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix sleep from invalid context BUG Taking the qos_mutex to process RoCEv2 QP's on netdev events causes a kernel splat. Fix this by removing the handling for RoCEv2 in irdma_cm_teardown_connections that uses the mutex. This handling is only needed for iWARP to avoid having connections established while the link is down or having connections remain functional after the IP address is removed. BUG: sleeping function called from invalid context at kernel/locking/mutex. Call Trace: kernel: dump_stack+0x66/0x90 kernel: ___might_sleep.cold.92+0x8d/0x9a kerne

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. CVE-2022-49605

    Mittel · CVSS 5.5EPSS 0,26%Korrektur verfügbar

    igc: Reinstate IGC_REMOVED logic and implement it properly

    In the Linux kernel, the following vulnerability has been resolved: igc: Reinstate IGC_REMOVED logic and implement it properly The initially merged version of the igc driver code (via commit 146740f9abc4, "igc: Add support for PF") contained the following IGC_REMOVED checks in the igc_rd32/wr32() MMIO accessors: u32 igc_rd32(struct igc_hw *hw, u32 reg) { u8 __iomem *hw_addr = READ_ONCE(hw->hw_addr); u32 value = 0; if (IGC_REMOVED(hw_addr)) return ~value; value = readl(&hw_addr[reg]); /* reads should not return all F's */ if (!(~value) && (!reg || !(~readl(hw_addr)))) hw->hw_addr = NULL; return value; } And: #d

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. CVE-2022-49604

    Mittel · CVSS 4.7EPSS 0,19%Korrektur verfügbar

    ip: Fix data-races around sysctl_ip_fwd_use_pmtu.

    In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_fwd_use_pmtu. While reading sysctl_ip_fwd_use_pmtu, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. CVE-2022-49603

    Mittel · CVSS 4.7EPSS 0,19%Korrektur verfügbar

    ip: Fix data-races around sysctl_ip_fwd_update_priority.

    In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_fwd_update_priority. While reading sysctl_ip_fwd_update_priority, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. CVE-2022-49602

    Mittel · CVSS 4.7EPSS 0,19%Korrektur verfügbar

    ip: Fix a data-race around sysctl_fwmark_reflect.

    In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctl_fwmark_reflect. While reading sysctl_fwmark_reflect, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. CVE-2022-49601

    Mittel · CVSS 4.7EPSS 0,19%Korrektur verfügbar

    tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.

    In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. While reading sysctl_tcp_fwmark_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  11. CVE-2022-49600

    Mittel · CVSS 4.7EPSS 0,19%Korrektur verfügbar

    ip: Fix a data-race around sysctl_ip_autobind_reuse.

    In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctl_ip_autobind_reuse. While reading sysctl_ip_autobind_reuse, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  12. CVE-2022-49599

    Mittel · CVSS 4.7EPSS 0,2%Korrektur verfügbar

    tcp: Fix data-races around sysctl_tcp_l3mdev_accept.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_l3mdev_accept. While reading sysctl_tcp_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  13. CVE-2022-49598

    Mittel · CVSS 4.7EPSS 0,19%Korrektur verfügbar

    tcp: Fix data-races around sysctl_tcp_mtu_probing.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_mtu_probing. While reading sysctl_tcp_mtu_probing, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  14. CVE-2022-49597

    Mittel · CVSS 4.7EPSS 0,18%Korrektur verfügbar

    tcp: Fix data-races around sysctl_tcp_base_mss.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_base_mss. While reading sysctl_tcp_base_mss, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  15. CVE-2022-49596

    Mittel · CVSS 4.7EPSS 0,18%Korrektur verfügbar

    tcp: Fix data-races around sysctl_tcp_min_snd_mss.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_min_snd_mss. While reading sysctl_tcp_min_snd_mss, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  16. CVE-2022-49595

    Mittel · CVSS 4.7EPSS 0,19%Korrektur verfügbar

    tcp: Fix a data-race around sysctl_tcp_probe_threshold.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_threshold. While reading sysctl_tcp_probe_threshold, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  17. CVE-2022-49594

    Mittel · CVSS 4.7EPSS 0,19%Korrektur verfügbar

    tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. While reading sysctl_tcp_mtu_probe_floor, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  18. CVE-2022-49593

    Mittel · CVSS 4.7EPSS 0,19%Korrektur verfügbar

    tcp: Fix a data-race around sysctl_tcp_probe_interval.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_interval. While reading sysctl_tcp_probe_interval, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  19. CVE-2022-49592

    Hoch · CVSS 7.8EPSS 0,28%Korrektur verfügbar

    net: stmmac: fix dma queue left shift overflow issue

    In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma queue left shift overflow issue When queue number is > 4, left shift overflows due to 32 bits integer variable. Mask calculation is wrong for MTL_RXQ_DMA_MAP1. If CONFIG_UBSAN is enabled, kernel dumps below warning: [ 10.363842] ================================================================== [ 10.363882] UBSAN: shift-out-of-bounds in /build/linux-intel-iotg-5.15-8e6Tf4/ linux-intel-iotg-5.15-5.15.0/drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c:224:12 [ 10.363929] shift exponent 40 is too large for 32-bit type 'unsigned int' [ 10.363953]

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  20. CVE-2022-49591

    Mittel · CVSS 5.5EPSS 0,26%Korrektur verfügbar

    net: dsa: microchip: ksz_common: Fix refcount leak bug

    In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: ksz_common: Fix refcount leak bug In ksz_switch_register(), we should call of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount.

    linux-lowlatency-hwe-5.15Betriebssysteme
    • Auf 5.15.0-50.56~20.04.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →