p PatchFirst

PatchFirst · Latest vulnerabilities

linux-lowlatency-hwe-5.15 vulnerabilities · Page 90

Vulnerabilities published for linux-lowlatency-hwe-5.15 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 4513

  1. CVE-2022-49590

    Medium · CVSS 4.7EPSS 0.19%Fix available

    igmp: Fix data-races around sysctl_igmp_llm_reports.

    In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctl_igmp_llm_reports. While reading sysctl_igmp_llm_reports, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. This test can be packed into a helper, so such changes will be in the follow-up series after net is merged into net-next. if (ipv4_is_local_multicast(pmc->multiaddr) && !READ_ONCE(net->ipv4.sysctl_igmp_llm_reports))

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2022-49589

    Medium · CVSS 4.7EPSS 0.19%Fix available

    igmp: Fix data-races around sysctl_igmp_qrv.

    In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctl_igmp_qrv. While reading sysctl_igmp_qrv, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. This test can be packed into a helper, so such changes will be in the follow-up series after net is merged into net-next. qrv ?: READ_ONCE(net->ipv4.sysctl_igmp_qrv);

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2022-49588

    Medium · CVSS 4.7EPSS 0.18%Fix available

    tcp: Fix data-races around sysctl_tcp_migrate_req.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_migrate_req. While reading sysctl_tcp_migrate_req, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2022-49587

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp: Fix a data-race around sysctl_tcp_notsent_lowat.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_notsent_lowat. While reading sysctl_tcp_notsent_lowat, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2022-49586

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp: Fix data-races around sysctl_tcp_fastopen.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_fastopen. While reading sysctl_tcp_fastopen, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. CVE-2022-49585

    Medium · CVSS 4.7EPSS 0.18%Fix available

    tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. While reading sysctl_tcp_fastopen_blackhole_timeout, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2022-49584

    Medium · CVSS 5.5EPSS 0.2%Fix available

    ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero

    In the Linux kernel, the following vulnerability has been resolved: ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero It is possible to disable VFs while the PF driver is processing requests from the VF driver. This can result in a panic. BUG: unable to handle kernel paging request at 000000000000106c PGD 0 P4D 0 Oops: 0000 [#1] SMP NOPTI CPU: 8 PID: 0 Comm: swapper/8 Kdump: loaded Tainted: G I --------- - Hardware name: Dell Inc. PowerEdge R740/06WXJT, BIOS 2.8.2 08/27/2020 RIP: 0010:ixgbe_msg_task+0x4c8/0x1690 [ixgbe] Code: 00 00 48 8d 04 40 48 c1 e0 05 89 7c 24 24 89 fd 48 89 44 24 10 83 ff 01 0f 84 b8 04 00 00

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2022-49583

    Medium · CVSS 5.5EPSS 0.27%Fix available

    iavf: Fix handling of dummy receive descriptors

    In the Linux kernel, the following vulnerability has been resolved: iavf: Fix handling of dummy receive descriptors Fix memory leak caused by not handling dummy receive descriptor properly. iavf_get_rx_buffer now sets the rx_buffer return value for dummy receive descriptors. Without this patch, when the hardware writes a dummy descriptor, iavf would not free the page allocated for the previous receive buffer. This is an unlikely event but can still happen. [Jesse: massaged commit message]

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2022-49581

    High · CVSS 7.8EPSS 0.31%Fix available

    be2net: Fix buffer overflow in be_get_module_eeprom

    In the Linux kernel, the following vulnerability has been resolved: be2net: Fix buffer overflow in be_get_module_eeprom be_cmd_read_port_transceiver_data assumes that it is given a buffer that is at least PAGE_DATA_LEN long, or twice that if the module supports SFF 8472. However, this is not always the case. Fix this by passing the desired offset and length to be_cmd_read_port_transceiver_data so that we only copy the bytes once.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2022-49580

    Medium · CVSS 4.7EPSS 0.18%Fix available

    ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.

    In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. While reading sysctl_fib_multipath_use_neigh, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. CVE-2022-49579

    Medium · CVSS 4.7EPSS 0.18%Fix available

    ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.

    In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. While reading sysctl_fib_multipath_hash_policy, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. CVE-2022-49578

    Medium · CVSS 4.7EPSS 0.18%Fix available

    ip: Fix data-races around sysctl_ip_prot_sock.

    In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_prot_sock. sysctl_ip_prot_sock is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. CVE-2022-49577

    Medium · CVSS 4.7EPSS 0.18%Fix available

    udp: Fix a data-race around sysctl_udp_l3mdev_accept.

    In the Linux kernel, the following vulnerability has been resolved: udp: Fix a data-race around sysctl_udp_l3mdev_accept. While reading sysctl_udp_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2022-49576

    Medium · CVSS 4.7EPSS 0.18%Fix available

    ipv4: Fix data-races around sysctl_fib_multipath_hash_fields.

    In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. While reading sysctl_fib_multipath_hash_fields, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. CVE-2022-49575

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. While reading sysctl_tcp_thin_linear_timeouts, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. CVE-2022-49574

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp: Fix data-races around sysctl_tcp_recovery.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_recovery. While reading sysctl_tcp_recovery, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2022-49573

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp: Fix a data-race around sysctl_tcp_early_retrans.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_early_retrans. While reading sysctl_tcp_early_retrans, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. CVE-2022-49572

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. While reading sysctl_tcp_slow_start_after_idle, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. CVE-2022-49571

    Medium · CVSS 4.7EPSS 0.19%Fix available

    tcp: Fix data-races around sysctl_tcp_max_reordering.

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_max_reordering. While reading sysctl_tcp_max_reordering, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2022-49570

    Medium · CVSS 5.5EPSS 0.26%Fix available

    gpio: gpio-xilinx: Fix integer overflow

    In the Linux kernel, the following vulnerability has been resolved: gpio: gpio-xilinx: Fix integer overflow Current implementation is not able to configure more than 32 pins due to incorrect data type. So type casting with unsigned long to avoid it.

    linux-lowlatency-hwe-5.15Operating systems
    • Update to 5.15.0-50.56~20.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →