rpm package
almalinux/bpftool
pkg:rpm/almalinux/bpftool
Vulnerabilities (901)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-24857 | Med | 4.6 | < 4.18.0-553.27.1.el8_10 | 4.18.0-553.27.1.el8_10 | Feb 5, 2024 | A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service. | |
| CVE-2023-6240 | — | < 7.3.0-427.16.1.el9_4 | 7.3.0-427.16.1.el9_4 | Feb 4, 2024 | A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key. | ||
| CVE-2024-1086 | — | KEV | < 4.18.0-513.24.1.el8_9 | 4.18.0-513.24.1.el8_9 | Jan 31, 2024 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cau | |
| CVE-2024-1085 | — | < 7.3.0-427.13.1.el9_4 | 7.3.0-427.13.1.el9_4 | Jan 31, 2024 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_setelem_catchall_deactivate() function checks whether the catch-all set element is active in the current generation instead of the | ||
| CVE-2024-0841 | — | < 7.3.0-427.13.1.el9_4 | 7.3.0-427.13.1.el9_4 | Jan 28, 2024 | A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system. | ||
| CVE-2024-23307 | Med | 4.4 | < 4.18.0-553.5.1.el8_10 | 4.18.0-553.5.1.el8_10 | Jan 25, 2024 | Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow. | |
| CVE-2023-51043 | — | < 7.3.0-427.13.1.el9_4 | 7.3.0-427.13.1.el9_4 | Jan 23, 2024 | In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload. | ||
| CVE-2023-51042 | — | < 4.18.0-513.24.1.el8_9 | 4.18.0-513.24.1.el8_9 | Jan 23, 2024 | In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free. | ||
| CVE-2023-6531 | — | < 7.3.0-427.13.1.el9_4 | 7.3.0-427.13.1.el9_4 | Jan 21, 2024 | A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on. | ||
| CVE-2021-33631 | — | < 4.18.0-513.24.1.el8_9 | 4.18.0-513.24.1.el8_9 | Jan 18, 2024 | Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0. | ||
| CVE-2024-0646 | — | < 4.18.0-513.18.1.el8_9 | 4.18.0-513.18.1.el8_9 | Jan 17, 2024 | An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system. | ||
| CVE-2024-0565 | — | < 4.18.0-513.24.1.el8_9 | 4.18.0-513.24.1.el8_9 | Jan 15, 2024 | An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service. | ||
| CVE-2023-6915 | — | < 7.3.0-427.13.1.el9_4 | 7.3.0-427.13.1.el9_4 | Jan 15, 2024 | A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return. | ||
| CVE-2023-6040 | — | < 7.3.0-427.13.1.el9_4 | 7.3.0-427.13.1.el9_4 | Jan 12, 2024 | An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_ | ||
| CVE-2024-0340 | — | < 4.18.0-553.5.1.el8_10 | 4.18.0-553.5.1.el8_10 | Jan 9, 2024 | A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local pri | ||
| CVE-2022-2588 | — | < 4.18.0-372.32.1.el8_6 | 4.18.0-372.32.1.el8_6 | Jan 8, 2024 | It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0. | ||
| CVE-2022-2586 | — | KEV | < 4.18.0-425.3.1.el8 | 4.18.0-425.3.1.el8 | Jan 8, 2024 | It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted. | |
| CVE-2022-2585 | — | < 5.14.0-70.30.1.el9_0 | 5.14.0-70.30.1.el9_0 | Jan 8, 2024 | It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free. | ||
| CVE-2023-51780 | — | < 7.3.0-427.13.1.el9_4 | 7.3.0-427.13.1.el9_4 | Dec 25, 2023 | An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition. | ||
| CVE-2023-6546 | — | < 4.18.0-513.24.1.el8_9 | 4.18.0-513.24.1.el8_9 | Dec 21, 2023 | A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci |
- affected < 4.18.0-553.27.1.el8_10fixed 4.18.0-553.27.1.el8_10
A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service.
- CVE-2023-6240Feb 4, 2024affected < 7.3.0-427.16.1.el9_4fixed 7.3.0-427.16.1.el9_4
A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.
- affected < 4.18.0-513.24.1.el8_9fixed 4.18.0-513.24.1.el8_9
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cau
- CVE-2024-1085Jan 31, 2024affected < 7.3.0-427.13.1.el9_4fixed 7.3.0-427.13.1.el9_4
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_setelem_catchall_deactivate() function checks whether the catch-all set element is active in the current generation instead of the
- CVE-2024-0841Jan 28, 2024affected < 7.3.0-427.13.1.el9_4fixed 7.3.0-427.13.1.el9_4
A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.
- affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10
Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.
- CVE-2023-51043Jan 23, 2024affected < 7.3.0-427.13.1.el9_4fixed 7.3.0-427.13.1.el9_4
In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.
- CVE-2023-51042Jan 23, 2024affected < 4.18.0-513.24.1.el8_9fixed 4.18.0-513.24.1.el8_9
In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.
- CVE-2023-6531Jan 21, 2024affected < 7.3.0-427.13.1.el9_4fixed 7.3.0-427.13.1.el9_4
A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.
- CVE-2021-33631Jan 18, 2024affected < 4.18.0-513.24.1.el8_9fixed 4.18.0-513.24.1.el8_9
Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.
- CVE-2024-0646Jan 17, 2024affected < 4.18.0-513.18.1.el8_9fixed 4.18.0-513.18.1.el8_9
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.
- CVE-2024-0565Jan 15, 2024affected < 4.18.0-513.24.1.el8_9fixed 4.18.0-513.24.1.el8_9
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
- CVE-2023-6915Jan 15, 2024affected < 7.3.0-427.13.1.el9_4fixed 7.3.0-427.13.1.el9_4
A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.
- CVE-2023-6040Jan 12, 2024affected < 7.3.0-427.13.1.el9_4fixed 7.3.0-427.13.1.el9_4
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_
- CVE-2024-0340Jan 9, 2024affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10
A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local pri
- CVE-2022-2588Jan 8, 2024affected < 4.18.0-372.32.1.el8_6fixed 4.18.0-372.32.1.el8_6
It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
- affected < 4.18.0-425.3.1.el8fixed 4.18.0-425.3.1.el8
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
- CVE-2022-2585Jan 8, 2024affected < 5.14.0-70.30.1.el9_0fixed 5.14.0-70.30.1.el9_0
It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.
- CVE-2023-51780Dec 25, 2023affected < 7.3.0-427.13.1.el9_4fixed 7.3.0-427.13.1.el9_4
An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition.
- CVE-2023-6546Dec 21, 2023affected < 4.18.0-513.24.1.el8_9fixed 4.18.0-513.24.1.el8_9
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci
Page 32 of 46