p PatchFirst

PatchFirst · Latest vulnerabilities

linux-ibm-5.15 vulnerabilities · Page 120

Vulnerabilities published for linux-ibm-5.15 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2540

  1. CVE-2023-46838

    High · CVSS 7.5EPSS 1.18%Fix available

    Linux: netback processing of zero-length transmit fragment

    Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translated into what Linux calls SKB fragments. Such converted request parts can, when for a particular SKB they are all of length zero, lead to a de-reference of NULL in core networking code.

    linux-ibm-5.15Operating systems
    • Update to 5.15.0-1050.53~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2024-0841

    Medium · CVSS 6.6EPSS 0.3%Fix available

    Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function

    A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

    linux-ibm-5.15Operating systems
    • Update to 5.15.0-1057.60~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2024-22099

    Medium · CVSS 6.3EPSS 0.61%Fix available

    NULL pointer deference in rfcomm_check_security in Linux kernel

    NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C. This issue affects Linux kernel: v2.6.12-rc2.

    linux-ibm-5.15Operating systems
    • Update to 5.15.0-1057.60~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2024-0775

    Medium · CVSS 6.7EPSS 0.22%Fix available

    Kernel: use-after-free while changing the mount option in __ext4_remount leading

    A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.

    linux-ibm-5.15Operating systems
    • Update to 5.15.0-1037.40~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. CVE-2024-0607

    Medium · CVSS 6.6EPSS 0.26%Fix available

    Kernel: nf_tables: pointer math issue in nft_byteorder_eval()

    A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.

    linux-ibm-5.15Operating systems
    • Update to 5.15.0-1048.51~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. CVE-2024-0646

    High · CVSS 7EPSS 0.31%Fix available

    Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

    An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.

    linux-ibm-5.15Operating systems
    • Update to 5.15.0-1047.50~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2024-0641

    Medium · CVSS 5.5EPSS 0.17%Fix available

    Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke

    A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.

    linux-ibm-5.15Operating systems
    • Update to 5.15.0-1046.49~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. CVE-2024-0639

    Medium · CVSS 5.5EPSS 0.18%Fix available

    Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos

    A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.

    linux-ibm-5.15Operating systems
    • Update to 5.15.0-1040.43~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. CVE-2024-0565

    Medium · CVSS 6.8EPSS 2%Fix available

    Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

    An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.

    linux-ibm-5.15Operating systems
    • Update to 5.15.0-1047.50~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2023-6915

    Medium · CVSS 6.2EPSS 0.28%Fix available

    Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c

    A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.

    linux-ibm-5.15Operating systems
    • Update to 5.15.0-1047.50~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →