almalinux/rv

Vulnerabilities (837)

• CVE-2024-26735MedApr 3, 2024
  affected < 5.14.0-427.20.1.el9_4fixed 5.14.0-427.20.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family.

• CVE-2023-52638MedApr 3, 2024
  affected < 5.14.0-427.26.1.el9_4fixed 5.14.0-427.26.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report: - j1939_socks_lock - active_ses

• CVE-2024-26673HigApr 2, 2024
  affected < 5.14.0-427.18.1.el9_4fixed 5.14.0-427.18.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - Disallow families other than NFPROTO_{IPV4,IPV6,INET}. - Disallow layer 4 protocol with no ports, since destination port is a

• CVE-2024-26668MedApr 2, 2024
  affected < 5.14.0-427.33.1.el9_4fixed 5.14.0-427.33.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s. Its be

• CVE-2023-52626HigMar 26, 2024
  affected < 5.14.0-427.24.1.el9_4fixed 5.14.0-427.24.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context Indirection (*) is of lower precedence than postfix increment (++). Logic in napi_poll context would cause an out-of-bound read by

• CVE-2024-26643HigMar 21, 2024
  affected < 5.14.0-427.18.1.el9_4fixed 5.14.0-427.18.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it

• CVE-2024-26642HigMar 21, 2024
  affected < 5.14.0-427.18.1.el9_4fixed 5.14.0-427.18.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.

• CVE-2023-52620HigMar 21, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow timeout for anonymous sets Never used from userspace, disallow these parameters.

• CVE-2024-26640HigMar 18, 2024
  affected < 5.14.0-427.42.1.el9_4fixed 5.14.0-427.42.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity checks to rx zerocopy TCP rx zerocopy intent is to map pages initially allocated from NIC drivers, not pages owned by a fs. This patch adds to can_map_frag() these additional checks: - Page mu

• CVE-2024-26633MedMar 18, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() syzbot pointed out [1] that NEXTHDR_FRAGMENT handling is broken. Reading frag_off can only be done if we pulled enough bytes to skb->hea

• CVE-2023-52610HigMar 18, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix skb leak and crash on ooo frags act_ct adds skb->users before defragmentation. If frags arrive in order, the last frag's reference is reset in: inet_frag_reasm_prepare skb_morph w

• CVE-2023-28746MedMar 14, 2024
  affected < 5.14.0-427.40.1.el9_4fixed 5.14.0-427.40.1.el9_4

  Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

• CVE-2024-26630HigMar 13, 2024
  affected < 5.14.0-427.35.1.el9_4fixed 5.14.0-427.35.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: mm: cachestat: fix folio read-after-free in cache walk In cachestat, we access the folio from the page cache's xarray to compute its page offset, and check for its dirty and writeback flags. However, we do not

• CVE-2024-26629MedMar 13, 2024
  affected < 5.14.0-427.35.1.el9_4fixed 5.14.0-427.35.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: nfsd: fix RELEASE_LOCKOWNER The test on so_count in nfsd4_release_lockowner() is nonsense and harmful. Revert to using check_for_locks(), changing that to not sleep. First: harmful. As is documented in the kd

• CVE-2024-26615MedMar 11, 2024
  affected < 5.14.0-503.16.1.el9_5fixed 5.14.0-503.16.1.el9_5

  In the Linux kernel, the following vulnerability has been resolved: net/smc: fix illegal rmb_desc access in SMC-D connection dump A crash was found when dumping SMC-D connections. It can be reproduced by following steps: - run nginx/wrk test: smc_run nginx smc_run wrk -t 1

• CVE-2023-52490MedMar 11, 2024
  affected < 5.14.0-503.26.1.el9_5fixed 5.14.0-503.26.1.el9_5

  In the Linux kernel, the following vulnerability has been resolved: mm: migrate: fix getting incorrect page mapping during page migration When running stress-ng testing, we found below kernel crash after a few hours: Unable to handle kernel NULL pointer dereference at virtual

• CVE-2023-52489MedMar 11, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below race is observed on a PFN which falls into the device memory region with the system memory configuration where PFN's are such that [ZONE_NORMA

• CVE-2023-52581MedMar 2, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak when more than 255 elements expired When more than 255 elements expired we're supposed to switch to a new gc container structure. This never happens: u8 type will wrap before

• CVE-2023-52580MedMar 2, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETH_P_1588 flow dissector When a PTP ethernet raw frame with a size of more than 256 bytes followed by a 0xff pattern is sent to __skb_flow_dissect, nhoff value calculation is wrong. For example:

• CVE-2023-52578HigMar 2, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_finish() [1] This function can run from multiple cpus without mutual exclusion. Adopt SMP safe DEV_STATS_INC() to update dev