p PatchFirst

PatchFirst · Latest vulnerabilities

linux-ibm-5.4 vulnerabilities · Page 53

Vulnerabilities published for linux-ibm-5.4 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 1295

  1. CVE-2021-46924

    Medium · CVSS 5.5EPSS 0.23%Fix available

    NFC: st21nfca: Fix memory leak in device probe and remove

    In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy->pending_skb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unreferenced object 0xffff88800bc06800 (size 512): comm "8", pid 11775, jiffies 4295159829 (age 9.032s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000d66c09ce>] __kmalloc_node_track_caller+0x1ed/0x450 [<00000000c93382b

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1018.20~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2019-25162

    High · CVSS 7.8EPSS 0.38%Fix available

    i2c: Fix a potential use after free

    In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit to avoid the use after free. [wsa: added comment to the code, added Fixes tag]

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1037.42~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2022-48626

    High · CVSS 7.8EPSS 0.31%Fix available

    moxart: fix potential use-after-free on remove path

    In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path It was reported that the mmc host structure could be accessed after it was freed in moxart_remove(), so fix this by saving the base register of the device and using it instead of the pointer dereference.

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1021.23~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2023-4459

    Medium · CVSS 5.5EPSS 0.25%Fix available

    Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

    A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1033.37~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2023-4387

    High · CVSS 7.1EPSS 0.24%Fix available

    Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()

    A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1033.37~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. CVE-2023-3812

    High · CVSS 7.8EPSS 0.34%Fix available

    Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

    An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1044.49~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. CVE-2023-3567

    High · CVSS 7.1EPSS 0.42%Fix available

    Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

    A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1049.54~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2023-2860

    Medium · CVSS 4.4EPSS 0.33%Fix available

    Out-of-bounds read when setting hmac data

    An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a privileged local user to disclose sensitive information on affected installations of the Linux kernel.

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1041.46~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. CVE-2023-3161

    Medium · CVSS 5.5EPSS 0.2%Fix available

    CVE-2023-3161

    A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1049.54~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2023-3159

    Medium · CVSS 6.7EPSS 0.21%Fix available

    CVE-2023-3159

    A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails.

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1031.35~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  18. CVE-2023-2612

    Medium · CVSS 4.4EPSS 0.28%Fix available

    shiftfs lock unbalance in Ubuntu-specific kernels

    Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1050.55~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. CVE-2023-0459

    Medium · CVSS 6.5EPSS 0.64%Fix available

    Copy_from_user Spectre-V1 Gadget in Linux Kernel

    Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1049.54~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2023-32233

    High · CVSS 7.8EPSS 13.44%Public exploitFix available

    CVE-2023-32233

    In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

    linux-ibm-5.4Operating systems
    • Update to 5.4.0-1050.55~18.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →