p PatchFirst

PatchFirst · Latest vulnerabilities

linux-lowlatency-hwe-5.15 vulnerabilities · Page 89

Vulnerabilities published for linux-lowlatency-hwe-5.15 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 4513

  1. CVE-2022-49610

    Medium · CVSS 5.5EPSS 0.23%Fix available

    KVM: VMX: Prevent RSB underflow before vmenter

    In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Prevent RSB underflow before vmenter On VMX, there are some balanced returns between the time the guest's SPEC_CTRL value is written, and the vmenter. Balanced returns (matched by a preceding call) are usually ok, but it's at least theoretically possible an NMI with a deep call stack could empty the RSB before one of the returns. For maximum paranoia, don't allow *any* returns (balanced or otherwise) between the SPEC_CTRL write and the vmenter. [ bp: Fix 32-bit build. ]

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-46.49~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2022-49609

    Medium · CVSS 5.5EPSS 0.27%Fix available

    power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

    In the Linux kernel, the following vulnerability has been resolved: power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe of_find_matching_node_and_match() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2022-49608

    Medium · CVSS 5.5EPSS 0.27%Fix available

    pinctrl: ralink: Check for null return of devm_kcalloc

    In the Linux kernel, the following vulnerability has been resolved: pinctrl: ralink: Check for null return of devm_kcalloc Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2022-49607

    Medium · CVSS 4.7EPSS 0.19%Fix available

    perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()

    In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() Yang Jihing reported a race between perf_event_set_output() and perf_mmap_close(): CPU1 CPU2 perf_mmap_close(e2) if (atomic_dec_and_test(&e2->rb->mmap_count)) // 1 - > 0 detach_rest = true ioctl(e1, IOC_SET_OUTPUT, e2) perf_event_set_output(e1, e2) ... list_for_each_entry_rcu(e, &e2->rb->event_list, rb_entry) ring_buffer_attach(e, NULL); // e1 isn't yet added and // therefore not detached ring_buffer_attach(e1, e2->rb) li

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2022-49606

    Medium · CVSS 6.7EPSS 0.2%Fix available

    RDMA/irdma: Fix sleep from invalid context BUG

    In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix sleep from invalid context BUG Taking the qos_mutex to process RoCEv2 QP's on netdev events causes a kernel splat. Fix this by removing the handling for RoCEv2 in irdma_cm_teardown_connections that uses the mutex. This handling is only needed for iWARP to avoid having connections established while the link is down or having connections remain functional after the IP address is removed. BUG: sleeping function called from invalid context at kernel/locking/mutex. Call Trace: kernel: dump_stack+0x66/0x90 kernel: ___might_sleep.cold.92+0x8d/0x9a kerne

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. CVE-2022-49605

    Medium · CVSS 5.5EPSS 0.26%Fix available

    igc: Reinstate IGC_REMOVED logic and implement it properly

    In the Linux kernel, the following vulnerability has been resolved: igc: Reinstate IGC_REMOVED logic and implement it properly The initially merged version of the igc driver code (via commit 146740f9abc4, "igc: Add support for PF") contained the following IGC_REMOVED checks in the igc_rd32/wr32() MMIO accessors: u32 igc_rd32(struct igc_hw *hw, u32 reg) { u8 __iomem *hw_addr = READ_ONCE(hw->hw_addr); u32 value = 0; if (IGC_REMOVED(hw_addr)) return ~value; value = readl(&hw_addr[reg]); /* reads should not return all F's */ if (!(~value) && (!reg || !(~readl(hw_addr)))) hw->hw_addr = NULL; return value; } And: #d

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2022-49604

    Medium · CVSS 4.7EPSS 0.19%Fix available

    ip: Fix data-races around sysctl_ip_fwd_use_pmtu.

    In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_fwd_use_pmtu. While reading sysctl_ip_fwd_use_pmtu, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2022-49603

    Medium · CVSS 4.7EPSS 0.19%Fix available

    ip: Fix data-races around sysctl_ip_fwd_update_priority.

    In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_fwd_update_priority. While reading sysctl_ip_fwd_update_priority, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2022-49602

    Medium · CVSS 4.7EPSS 0.19%Fix available

    ip: Fix a data-race around sysctl_fwmark_reflect.

    In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctl_fwmark_reflect. While reading sysctl_fwmark_reflect, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2022-49601

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.

    In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. While reading sysctl_tcp_fwmark_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. CVE-2022-49600

    Medium · CVSS 4.7EPSS 0.19%Fix available

    ip: Fix a data-race around sysctl_ip_autobind_reuse.

    In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctl_ip_autobind_reuse. While reading sysctl_ip_autobind_reuse, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. CVE-2022-49599

    Medium · CVSS 4.7EPSS 0.2%Fix available

    tcp: Fix data-races around sysctl_tcp_l3mdev_accept.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_l3mdev_accept. While reading sysctl_tcp_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. CVE-2022-49598

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp: Fix data-races around sysctl_tcp_mtu_probing.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_mtu_probing. While reading sysctl_tcp_mtu_probing, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2022-49597

    Medium · CVSS 4.7EPSS 0.18%Fix available

    tcp: Fix data-races around sysctl_tcp_base_mss.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_base_mss. While reading sysctl_tcp_base_mss, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. CVE-2022-49596

    Medium · CVSS 4.7EPSS 0.18%Fix available

    tcp: Fix data-races around sysctl_tcp_min_snd_mss.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_min_snd_mss. While reading sysctl_tcp_min_snd_mss, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. CVE-2022-49595

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp: Fix a data-race around sysctl_tcp_probe_threshold.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_threshold. While reading sysctl_tcp_probe_threshold, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2022-49594

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. While reading sysctl_tcp_mtu_probe_floor, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. CVE-2022-49593

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp: Fix a data-race around sysctl_tcp_probe_interval.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_interval. While reading sysctl_tcp_probe_interval, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. CVE-2022-49592

    High · CVSS 7.8EPSS 0.28%Fix available

    net: stmmac: fix dma queue left shift overflow issue

    In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma queue left shift overflow issue When queue number is > 4, left shift overflows due to 32 bits integer variable. Mask calculation is wrong for MTL_RXQ_DMA_MAP1. If CONFIG_UBSAN is enabled, kernel dumps below warning: [ 10.363842] ================================================================== [ 10.363882] UBSAN: shift-out-of-bounds in /build/linux-intel-iotg-5.15-8e6Tf4/ linux-intel-iotg-5.15-5.15.0/drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c:224:12 [ 10.363929] shift exponent 40 is too large for 32-bit type 'unsigned int' [ 10.363953]

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2022-49591

    Medium · CVSS 5.5EPSS 0.26%Fix available

    net: dsa: microchip: ksz_common: Fix refcount leak bug

    In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: ksz_common: Fix refcount leak bug In ksz_switch_register(), we should call of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →