rpm package
almalinux/kernel-rt-debug-modules-extra
pkg:rpm/almalinux/kernel-rt-debug-modules-extra
Vulnerabilities (1,249)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-26341 | Med | 6.5 | < 5.14.0-284.11.1.rt14.296.el9_2 | 5.14.0-284.11.1.rt14.296.el9_2 | Mar 11, 2022 | Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage. | |
| CVE-2021-3640 | Hig | 7.0 | < 4.18.0-425.3.1.rt7.213.el8 | 4.18.0-425.3.1.rt7.213.el8 | Mar 3, 2022 | A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable fau | |
| CVE-2020-36516 | Med | 5.9 | < 4.18.0-425.3.1.rt7.213.el8 | 4.18.0-425.3.1.rt7.213.el8 | Feb 26, 2022 | An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session. | |
| CVE-2022-25265 | Hig | 7.8 | < 4.18.0-477.10.1.rt7.274.el8_8 | 4.18.0-477.10.1.rt7.274.el8_8 | Feb 16, 2022 | In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file. | |
| CVE-2022-0617 | Med | 5.5 | < 4.18.0-425.3.1.rt7.213.el8 | 4.18.0-425.3.1.rt7.213.el8 | Feb 16, 2022 | A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2. | |
| CVE-2022-24448 | Low | 3.3 | < 4.18.0-425.3.1.rt7.213.el8 | 4.18.0-425.3.1.rt7.213.el8 | Feb 4, 2022 | An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns | |
| CVE-2020-26555 | Med | 5.4 | < 5.14.0-427.13.1.el9_4 | 5.14.0-427.13.1.el9_4 | May 24, 2021 | Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN. | |
| CVE-2021-30002 | Med | 6.2 | < 4.18.0-425.3.1.rt7.213.el8 | 4.18.0-425.3.1.rt7.213.el8 | Apr 2, 2021 | An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b. | |
| CVE-2020-28915 | Med | 5.8 | < 4.18.0-372.13.1.rt7.170.el8_6 | 4.18.0-372.13.1.rt7.170.el8_6 | Nov 18, 2020 | A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def. |
- affected < 5.14.0-284.11.1.rt14.296.el9_2fixed 5.14.0-284.11.1.rt14.296.el9_2
Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.
- affected < 4.18.0-425.3.1.rt7.213.el8fixed 4.18.0-425.3.1.rt7.213.el8
A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable fau
- affected < 4.18.0-425.3.1.rt7.213.el8fixed 4.18.0-425.3.1.rt7.213.el8
An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.
- affected < 4.18.0-477.10.1.rt7.274.el8_8fixed 4.18.0-477.10.1.rt7.274.el8_8
In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.
- affected < 4.18.0-425.3.1.rt7.213.el8fixed 4.18.0-425.3.1.rt7.213.el8
A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2.
- affected < 4.18.0-425.3.1.rt7.213.el8fixed 4.18.0-425.3.1.rt7.213.el8
An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns
- affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4
Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.
- affected < 4.18.0-425.3.1.rt7.213.el8fixed 4.18.0-425.3.1.rt7.213.el8
An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b.
- affected < 4.18.0-372.13.1.rt7.170.el8_6fixed 4.18.0-372.13.1.rt7.170.el8_6
A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.
Page 63 of 63