RHSA-2020_1769
Vulnerability from csaf_redhat - Published: 2020-04-28 15:43 - Updated: 2024-11-15 11:44A flaw was found in the Linux kernel's NFS implementation. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.2.0.GA:bpftool-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:bpftool-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:bpftool-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:bpftool-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-0:4.18.0-193.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-abi-whitelists-0:4.18.0-193.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-core-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-core-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-core-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-core-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-common-aarch64-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-common-ppc64le-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-common-s390x-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-debuginfo-common-x86_64-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-doc-0:4.18.0-193.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-core-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-devel-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-modules-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:kernel-zfcpdump-modules-extra-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:perf-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:perf-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:perf-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:perf-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:python3-perf-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:python3-perf-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:python3-perf-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:python3-perf-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:bpftool-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:bpftool-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:bpftool-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:bpftool-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:bpftool-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-0:4.18.0-193.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-abi-whitelists-0:4.18.0-193.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-core-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-core-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-core-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-core-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-cross-headers-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-core-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-devel-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-common-aarch64-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-common-ppc64le-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-common-s390x-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-debuginfo-common-x86_64-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-devel-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-doc-0:4.18.0-193.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-headers-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-modules-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-modules-extra-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-core-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-devel-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-modules-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:kernel-zfcpdump-modules-extra-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:perf-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:perf-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:perf-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:perf-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:perf-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:python3-perf-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:python3-perf-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:python3-perf-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:python3-perf-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:python3-perf-debuginfo-0:4.18.0-193.el8.x86_64 | — |
Vendor Fix
fix
|
A flaw was found in the Linux kernel’s implementation of the WiFi station handoff code. An attacker within the radio range could use this flaw to deny a valid device from joining the access point.
A kernel memory leak was found in the kernel_read_file() function in the fs/exec.c file in the Linux kernel. An attacker could use this flaw to cause a memory leak and thus a denial of service (DoS).
A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a net_hash_mix() function. A remote user could observe this IP ID field to extract the kernel address bits used to derive its value, which may result in leaking the hash key and potentially defeating KASLR.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorA use-after-free flaw was found in the Linux kernel's MDIO section of the network management subsystem. An attacker who is able to hot-plug a network device can trigger the __mdiobus_register() function in drivers/net/phy/mdio_bus.c, which can cause a use-after-free condition causing a memory corruption and kernel panic or privilege escalation.
An out-of-bounds (OOB) memory access flaw was found in the Qlogic ISCSI module in the Linux kernel's qedi_dbg_* family of functions in drivers/scsi/qedi/qedi_dbg.c. Here a local attacker with a special user privilege account (or a root) can cause an out-of-bound memory access leading to a system crash or a leak of internal kernel information.
A null pointer dereference flaw was discovered in the Linux kernel's implementation of the ath10k USB device driver. The vulnerability requires the attacker to plug in a specially crafted hardware device that present endpoint descriptors that normal ath10k devices do not recognize. System availability is the highest threat with this vulnerability.
A NULL pointer dereference flaw was found in the way the LINE6 drivers in the Linux kernel allocated buffers for USB packets. This flaw allows an attacker with physical access to the system to crash the system.
A NULL pointer dereference flaw was found in the way the Line 6 POD USB driver in the Linux kernel handled disconnection. This flaw allows an attacker with physical access to the system to crash the system.
A flaw was found in the Linux kernel. A check was not done on the alloc_workqueue return value of the iwl_trans_pcie_alloc function potentially leading to a NULL pointer dereference. This error condition could lead to a denial of service. The highest threat from this vulnerability is to system availability.
A flaw in the Linux kernel's WiFi beacon validation code was discovered. The code does not check the length of the variable length elements in the beacon head potentially leading to a buffer overflow. System availability, as well as data confidentiality and integrity, can be impacted by this vulnerability.
A vulnerability was discovered in the Linux kernel's AF_IEEE802154 networking module where permissions checks are not enforced. This can allow an unprivileged user to create raw sockets for this protocol leading to the potential for data leaks or system unavailability.
A vulnerability was found in the Linux kernel’s implementation of the AF_ISDN protocol, which does not enforce the CAP_NET_RAW capability. This flaw can allow unprivileged users to create a raw socket for this protocol. This could further allow the user to control the availability of an existing ISDN circuit.
A device tracking vulnerability was found in the flow_dissector feature in the Linux kernel. This flaw occurs because the auto flowlabel of the UDP IPv6 packet relies on a 32-bit hashmd value as a secret, and jhash (instead of siphash) is used. The hashmd value remains the same starting from boot time and can be inferred by an attacker.
A flaw was reported in the Linux kernel's TCP subsystem while calculating a packet round trip time, when a sysctl parameter (/proc/sys/net/ipv4/tcp_min_rtt_wlen) is set incorrectly. This causes an integer overflow which can lead to a denial Of service (DOS) attack.
A flaw was found in the Linux kernel. The Mellanox Technologies Innova driver mishandles resource cleanup on error. An attacker, able to trigger error could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.
A flaw was found in the way the Mellanox 5th generation network adapters (ConnectX series) core driver in the Linux kernel handled resource cleanup in the mlx5_fw_fatal_reporter_dump function. This flaw allows an attacker with the ability to trigger errors in the mlx5_crdump_collect function to crash the system.
A flaw was found in the Linux kernel. The Wireless configuration API functionality mishandles resource cleanup in nl80211_get_ftm_responder_stats function. An attacker able to trigger the resource cleanup code path could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.
Two memory leak flaws were found in the Linux kernel's mwifiex_pcie_init_evt_ring() function. A local attacker, able to reload the kernel module or hotplug Marvell WiFi hardware using this driver, can cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures.
A flaw was found in the Linux kernel. The Intel Wireless WiFi MVM Firmware driver mishandles resource cleanup during device coredump. An attacker able to trigger the device coredump and system-wide out of memory conditions at the same time could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.
A flaw was found in the way the Intel Wireless driver in the Linux kernel handled resource cleanup during Gen 3 device initialization. This flaw allows an attacker with the ability to restrict access to DMA coherent memory on device initialization, to crash the system.
A flaw was found in the Linux kernel. The Intel OPA Gen1 driver mishandles resource cleanup. An attacker able to induce low memory condition on the system could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.
A flaw was found in the Linux kernel. The acp_hw_init function fails to cleanup resources properly. A local attacker can induce an error condition to crash the system. The highest threat from this vulnerability is to system availability.
Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.
A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
A memory leak flaw was found in the Broadcom NetXtreme HCA driver in the Linux kernel, in the way it handled resource cleanup on the copy to userspace error. This flaw allows a local attacker to trigger this error and crash the system.
An out-of-bounds write flaw was found in the Linux kernel’s HID drivers. An attacker, able to plug in a malicious USB device, can crash the system or read and write to memory with an incorrect address.
An information-leak flaw was found in the Linux kernel's pcan USB driver. When a device using this driver connects to the system, the stack information is leaked to the CAN bus, a controller area network for automobiles. The highest threat with this vulnerability is breach of data confidentiality.
A use-after-free vulnerability was found in the Linux kernel’s implementation of blktrace in the __blk_add_trace function. A local attacker with permissions to run block trace instructions against a device can create a situation where the core block_trace object is used after it is freed. The attacker can pre-groom memory to race this use-after-free to create a condition where the memory is corrupted and cause privilege escalation. The ability to create this condition requires elevated privileges, and it has been decided that this change in Red Hat Enterprise Linux 5 and 6 would risk introducing possible regressions and will not be backported.
A flaw was found in the Linux kernel’s scheduler, where it can allow attackers to cause a denial of service against non-CPU-bound applications by generating a workload that triggers unwanted scheduling slice expiration. A local attacker who can trigger a specific workload type could abuse this technique to trigger a system to be seen as degraded, and possibly trigger workload-rebalance in systems that use the slice-expiration metric as a measure of system health.
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
A use-after-free flaw was found in the Linux kernel’s GPU driver functionality when destroying GEM context. A local user could use this flaw to crash the system or potentially escalate their privileges.
There is a use-after-free problem seen due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.
A NULL pointer dereference flaw was found in the Linux kernel's network scheduler. This issue occurs when offloading is enabled, the cbs instance is not added to the list. The code also incorrectly handles the case when offload is disabled without removing the qdisc. This could allow a local user to cause a denial of service condition.
Loading 2.1 MB of JSON…
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.