{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "KVM: do not allow mapping valid but non-reference-counted pages {CVE-2021-22543}", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux6els/advisories/2022/clsa-2022_1669850228.json" } ], "tracking": { "current_release_date": "2026-10-21T14:58:03Z", "generator": { "date": "2026-10-21T14:58:03Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2022:1669850228", "initial_release_date": "2022-11-30T00:00:00Z", "revision_history": [ { "date": "2022-11-30T00:00:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-21T14:58:03Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "kernel: Fix of 25 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Linux 6", "product": { "name": "Oracle Linux 6", "product_id": "Oracle-Linux-6", "product_identification_helper": { "cpe": "cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle Corporation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product": { "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_id": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-devel@2.6.32-754.35.8.el6.tuxcare.els11?arch=i686" } } }, { "category": "product_version", "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product": { "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_id": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-debug@2.6.32-754.35.8.el6.tuxcare.els11?arch=i686" } } }, { "category": "product_version", "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product": { "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_id": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-headers@2.6.32-754.35.8.el6.tuxcare.els11?arch=i686" } } }, { "category": "product_version", "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product": { "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_id": "perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/perf@2.6.32-754.35.8.el6.tuxcare.els11?arch=i686" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product": { "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_id": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-debug-devel@2.6.32-754.35.8.el6.tuxcare.els11?arch=i686" } } }, { "category": "product_version", "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product": { "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_id": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel@2.6.32-754.35.8.el6.tuxcare.els11?arch=i686" } } }, { "category": "product_version", "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product": { "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_id": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/python-perf@2.6.32-754.35.8.el6.tuxcare.els11?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product": { "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_id": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-devel@2.6.32-754.35.8.el6.tuxcare.els11?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product": { "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_id": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-debug@2.6.32-754.35.8.el6.tuxcare.els11?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product": { "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_id": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-headers@2.6.32-754.35.8.el6.tuxcare.els11?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product": { "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_id": "perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/perf@2.6.32-754.35.8.el6.tuxcare.els11?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product": { "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_id": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-debug-devel@2.6.32-754.35.8.el6.tuxcare.els11?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product": { "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_id": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel@2.6.32-754.35.8.el6.tuxcare.els11?arch=x86_64" } } }, { "category": "product_version", "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product": { "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_id": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/python-perf@2.6.32-754.35.8.el6.tuxcare.els11?arch=x86_64" } } }, { "category": "product_version", "name": "python-perf-0:2.6.32-754.35.2.el6.x86_64", "product": { "name": "python-perf-0:2.6.32-754.35.2.el6.x86_64", "product_id": "python-perf-0:2.6.32-754.35.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/python-perf@2.6.32-754.35.2.el6?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:2.6.32-754.35.2.el6.x86_64", "product": { "name": "perf-0:2.6.32-754.35.2.el6.x86_64", "product_id": "perf-0:2.6.32-754.35.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/perf@2.6.32-754.35.2.el6?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:2.6.32-754.35.2.el6.x86_64", "product": { "name": "kernel-0:2.6.32-754.35.2.el6.x86_64", "product_id": "kernel-0:2.6.32-754.35.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel@2.6.32-754.35.2.el6?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "product": { "name": "kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "product_id": "kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-devel@2.6.32-754.35.2.el6?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "product": { "name": "kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "product_id": "kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-debug-devel@2.6.32-754.35.2.el6?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "product": { "name": "kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "product_id": "kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-headers@2.6.32-754.35.2.el6?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "product": { "name": "kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "product_id": "kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-debug@2.6.32-754.35.2.el6?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686" }, "product_reference": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" }, "product_reference": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686" }, "product_reference": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" }, "product_reference": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" }, "product_reference": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686" }, "product_reference": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686" }, "product_reference": "perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" }, "product_reference": "perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686" }, "product_reference": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" }, "product_reference": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686" }, "product_reference": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" }, "product_reference": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" }, "product_reference": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686" }, "product_reference": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf-0:2.6.32-754.35.2.el6.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" }, "product_reference": "python-perf-0:2.6.32-754.35.2.el6.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:2.6.32-754.35.2.el6.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64" }, "product_reference": "perf-0:2.6.32-754.35.2.el6.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:2.6.32-754.35.2.el6.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64" }, "product_reference": "kernel-0:2.6.32-754.35.2.el6.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:2.6.32-754.35.2.el6.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64" }, "product_reference": "kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64" }, "product_reference": "kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:2.6.32-754.35.2.el6.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64" }, "product_reference": "kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:2.6.32-754.35.2.el6.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64" }, "product_reference": "kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "relates_to_product_reference": "Oracle-Linux-6" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-37159", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-37159" }, { "category": "external", "summary": "https://bugzilla.suse.com/show_bug.cgi?id=1188601", "url": "https://bugzilla.suse.com/show_bug.cgi?id=1188601" }, { "category": "external", "summary": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6ecfb39ba9d7316057cea823b196b734f6b18ca", "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6ecfb39ba9d7316057cea823b196b734f6b18ca" }, { "category": "external", "summary": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dcb713d53e2eadf42b878c12a471e74dc6ed3145", "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dcb713d53e2eadf42b878c12a471e74dc6ed3145" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html", "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html", "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210819-0003/", "url": "https://security.netapp.com/advisory/ntap-20210819-0003/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2022.html", "url": "https://www.oracle.com/security-alerts/cpujul2022.html" }, { "category": "external", "summary": "https://www.spinics.net/lists/linux-usb/msg202228.html", "url": "https://www.spinics.net/lists/linux-usb/msg202228.html" } ], "release_date": "2021-07-21T15:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-07-21T15:16:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2021-3609", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": ".A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-3609" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=1971651", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1971651" }, { "category": "external", "summary": "https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md", "url": "https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/d5f9023fa61ee8b94f37a93f08e94b136cf1e463", "url": "https://github.com/torvalds/linux/commit/d5f9023fa61ee8b94f37a93f08e94b136cf1e463" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20220419-0004/", "url": "https://security.netapp.com/advisory/ntap-20220419-0004/" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2021/06/19/1", "url": "https://www.openwall.com/lists/oss-security/2021/06/19/1" } ], "release_date": "2022-03-03T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2022-03-03T19:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2020-0466", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147802478References: Upstream kernel", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2020-0466" }, { "category": "external", "summary": "https://source.android.com/security/bulletin/2020-12-01", "url": "https://source.android.com/security/bulletin/2020-12-01" } ], "release_date": "2020-12-14T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2020-12-14T22:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-20292", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-20292" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=1939686", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1939686" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html" } ], "release_date": "2021-05-28T11:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-05-28T11:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2014-4508", "notes": [ { "category": "description", "text": "arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2014-4508" }, { "category": "external", "summary": "http://article.gmane.org/gmane.linux.kernel/1726110", "url": "http://article.gmane.org/gmane.linux.kernel/1726110" }, { "category": "external", "summary": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html", "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html" }, { "category": "external", "summary": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html", "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html" }, { "category": "external", "summary": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" }, { "category": "external", "summary": "http://openwall.com/lists/oss-security/2014/06/20/1", "url": "http://openwall.com/lists/oss-security/2014/06/20/1" }, { "category": "external", "summary": "http://secunia.com/advisories/58964", "url": "http://secunia.com/advisories/58964" }, { "category": "external", "summary": "http://secunia.com/advisories/60564", "url": "http://secunia.com/advisories/60564" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2014/06/20/10", "url": "http://www.openwall.com/lists/oss-security/2014/06/20/10" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2020/11/12/3", "url": "http://www.openwall.com/lists/oss-security/2020/11/12/3" }, { "category": "external", "summary": "http://www.securityfocus.com/bid/68126", "url": "http://www.securityfocus.com/bid/68126" }, { "category": "external", "summary": "http://www.ubuntu.com/usn/USN-2334-1", "url": "http://www.ubuntu.com/usn/USN-2334-1" }, { "category": "external", "summary": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.61", "url": "https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.61" } ], "release_date": "2014-06-23T11:21:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2014-06-23T11:21:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C", "version": "2.0" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2021-3655", "cwe": { "id": "CWE-909", "name": "Missing Initialization of Resource" }, "notes": [ { "category": "description", "text": "A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-3655" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=1984024", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1984024" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html", "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html", "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html" } ], "release_date": "2021-08-05T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-08-05T21:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2021-28972", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "description", "text": "In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\\0' termination, aka CID-cc7a0bb058b8.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-28972" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc7a0bb058b85ea03db87169c60c7cfdd5d34678", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc7a0bb058b85ea03db87169c60c7cfdd5d34678" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210430-0003/", "url": "https://security.netapp.com/advisory/ntap-20210430-0003/" } ], "release_date": "2021-03-22T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-03-22T17:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2021-38205", "cwe": { "id": "CWE-824", "name": "Access of Uninitialized Pointer" }, "notes": [ { "category": "description", "text": "drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real IOMEM pointer).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-38205" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3", "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/d0d62baa7f505bd4c59cd169692ff07ec49dde37", "url": "https://github.com/torvalds/linux/commit/d0d62baa7f505bd4c59cd169692ff07ec49dde37" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html", "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html", "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html" } ], "release_date": "2021-08-08T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-08-08T20:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2020-36385", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2020-36385" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10", "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f5449e74802c1112dea984aec8af7a33c4516af1", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f5449e74802c1112dea984aec8af7a33c4516af1" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210720-0004/", "url": "https://security.netapp.com/advisory/ntap-20210720-0004/" }, { "category": "external", "summary": "https://sites.google.com/view/syzscope/kasan-use-after-free-read-in-ucma_close-2", "url": "https://sites.google.com/view/syzscope/kasan-use-after-free-read-in-ucma_close-2" }, { "category": "external", "summary": "https://syzkaller.appspot.com/bug?id=457491c4672d7b52c1007db213d93e47c711fae6", "url": "https://syzkaller.appspot.com/bug?id=457491c4672d7b52c1007db213d93e47c711fae6" }, { "category": "external", "summary": "https://www.starwindsoftware.com/security/sw-20220802-0002/", "url": "https://www.starwindsoftware.com/security/sw-20220802-0002/" } ], "release_date": "2021-06-07T12:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-06-07T12:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-4155", "cwe": { "id": "CWE-131", "name": "Incorrect Calculation of Buffer Size" }, "notes": [ { "category": "description", "text": "A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-4155" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2021-4155", "url": "https://access.redhat.com/security/cve/CVE-2021-4155" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2034813", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034813" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=983d8e60f50806f90534cc5373d0ce867e5aaf79", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=983d8e60f50806f90534cc5373d0ce867e5aaf79" }, { "category": "external", "summary": "https://security-tracker.debian.org/tracker/CVE-2021-4155", "url": "https://security-tracker.debian.org/tracker/CVE-2021-4155" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2022/01/10/1", "url": "https://www.openwall.com/lists/oss-security/2022/01/10/1" } ], "release_date": "2022-08-24T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2022-08-24T16:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2021-31916", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-31916" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=1946965", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1946965" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/4edbe1d7bcffcd6269f3b5eb63f710393ff2ec7a", "url": "https://github.com/torvalds/linux/commit/4edbe1d7bcffcd6269f3b5eb63f710393ff2ec7a" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html", "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html" }, { "category": "external", "summary": "https://seclists.org/oss-sec/2021/q1/268", "url": "https://seclists.org/oss-sec/2021/q1/268" } ], "release_date": "2021-05-06T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-05-06T17:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2021-22543", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-22543" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2021/06/26/1", "url": "http://www.openwall.com/lists/oss-security/2021/06/26/1" }, { "category": "external", "summary": "https://github.com/google/security-research/security/advisories/GHSA-7wq5-phmq-m584", "url": "https://github.com/google/security-research/security/advisories/GHSA-7wq5-phmq-m584" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html", "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html", "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4G5YBUVEPHZYXMKNGBZ3S6INFCTEEL4E/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4G5YBUVEPHZYXMKNGBZ3S6INFCTEEL4E/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ROQIXQB7ZAWI3KSGSHR6H5RDUWZI775S/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ROQIXQB7ZAWI3KSGSHR6H5RDUWZI775S/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210708-0002/", "url": "https://security.netapp.com/advisory/ntap-20210708-0002/" } ], "release_date": "2021-05-26T11:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-05-26T11:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-38160", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "description", "text": "In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any existing use case; the length validation was added solely for robustness in the face of anomalous host OS behavior", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-38160" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/cve-2021-38160", "url": "https://access.redhat.com/security/cve/cve-2021-38160" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4", "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/d00d8da5869a2608e97cfede094dfc5e11462a46", "url": "https://github.com/torvalds/linux/commit/d00d8da5869a2608e97cfede094dfc5e11462a46" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html", "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html", "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210902-0010/", "url": "https://security.netapp.com/advisory/ntap-20210902-0010/" }, { "category": "external", "summary": "https://www.debian.org/security/2021/dsa-4978", "url": "https://www.debian.org/security/2021/dsa-4978" } ], "release_date": "2021-08-07T04:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-08-07T04:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-20265", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-20265" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=1908827", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1908827" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa0dc04df259ba2df3ce1920e9690c7842f8fa4b", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa0dc04df259ba2df3ce1920e9690c7842f8fa4b" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2021.html", "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" } ], "release_date": "2021-03-10T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-03-10T16:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2021-32399", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-32399" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2021/05/11/2", "url": "http://www.openwall.com/lists/oss-security/2021/05/11/2" }, { "category": "external", "summary": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e2cb6b891ad2b8caa9131e3be70f45243df82a80", "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e2cb6b891ad2b8caa9131e3be70f45243df82a80" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/e2cb6b891ad2b8caa9131e3be70f45243df82a80", "url": "https://github.com/torvalds/linux/commit/e2cb6b891ad2b8caa9131e3be70f45243df82a80" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html", "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210622-0006/", "url": "https://security.netapp.com/advisory/ntap-20210622-0006/" } ], "release_date": "2021-05-10T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-05-10T22:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-28390", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-28390" }, { "category": "external", "summary": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646", "url": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html", "url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20220513-0001/", "url": "https://security.netapp.com/advisory/ntap-20220513-0001/" }, { "category": "external", "summary": "https://www.debian.org/security/2022/dsa-5127", "url": "https://www.debian.org/security/2022/dsa-5127" }, { "category": "external", "summary": "https://www.debian.org/security/2022/dsa-5173", "url": "https://www.debian.org/security/2022/dsa-5173" } ], "release_date": "2022-04-03T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2022-04-03T21:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-3573", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-3573" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2023/07/02/1", "url": "http://www.openwall.com/lists/oss-security/2023/07/02/1" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=1966578", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966578" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git/commit/?id=e305509e678b3a4af2b3cfd410f409f7cdaabb52", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git/commit/?id=e305509e678b3a4af2b3cfd410f409f7cdaabb52" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2021/06/08/2", "url": "https://www.openwall.com/lists/oss-security/2021/06/08/2" } ], "release_date": "2021-08-13T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-08-13T14:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2021-1048", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204573007References: Upstream kernel", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-1048" }, { "category": "external", "summary": "https://source.android.com/security/bulletin/2021-11-01", "url": "https://source.android.com/security/bulletin/2021-11-01" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1048", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1048" } ], "release_date": "2021-12-15T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-12-15T19:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-0492", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "notes": [ { "category": "description", "text": "A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-0492" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html", "url": "http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html", "url": "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html", "url": "http://packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2051505", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2051505" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html", "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html", "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20220419-0002/", "url": "https://security.netapp.com/advisory/ntap-20220419-0002/" }, { "category": "external", "summary": "https://www.debian.org/security/2022/dsa-5095", "url": "https://www.debian.org/security/2022/dsa-5095" }, { "category": "external", "summary": "https://www.debian.org/security/2022/dsa-5096", "url": "https://www.debian.org/security/2022/dsa-5096" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0492", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0492" } ], "release_date": "2022-03-03T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2022-03-03T19:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-3612", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-3612" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=1974079", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1974079" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html", "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html", "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKGI562LFV5MESTMVTCG5RORSBT6NGBN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKGI562LFV5MESTMVTCG5RORSBT6NGBN/" }, { "category": "external", "summary": "https://lore.kernel.org/linux-input/20210620120030.1513655-1-avlarkin82%40gmail.com/", "url": "https://lore.kernel.org/linux-input/20210620120030.1513655-1-avlarkin82%40gmail.com/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210805-0005/", "url": "https://security.netapp.com/advisory/ntap-20210805-0005/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2022.html", "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ], "release_date": "2021-07-09T11:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-07-09T11:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-0920", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-0920" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html", "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html" }, { "category": "external", "summary": "https://source.android.com/security/bulletin/2021-11-01", "url": "https://source.android.com/security/bulletin/2021-11-01" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-0920", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-0920" } ], "release_date": "2021-12-15T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-12-15T19:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2021-4083", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-4083" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2029923", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2029923" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=054aa8d439b9", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=054aa8d439b9" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html", "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html", "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20220217-0005/", "url": "https://security.netapp.com/advisory/ntap-20220217-0005/" }, { "category": "external", "summary": "https://www.debian.org/security/2022/dsa-5096", "url": "https://www.debian.org/security/2022/dsa-5096" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2022.html", "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ], "release_date": "2022-01-18T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2022-01-18T17:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-34693", "cwe": { "id": "CWE-909", "name": "Missing Initialization of Resource" }, "notes": [ { "category": "description", "text": "net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-34693" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2021/06/15/1", "url": "http://www.openwall.com/lists/oss-security/2021/06/15/1" }, { "category": "external", "summary": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5e87ddbe3942e27e939bdc02deb8579b0cbd8ecc", "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5e87ddbe3942e27e939bdc02deb8579b0cbd8ecc" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/07/msg00014.html", "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00014.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/07/msg00015.html", "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00015.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/07/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00016.html" }, { "category": "external", "summary": "https://lore.kernel.org/netdev/trinity-87eaea25-2a7d-4aa9-92a5-269b822e5d95-1623609211076%403c-app-gmx-bs04/T/", "url": "https://lore.kernel.org/netdev/trinity-87eaea25-2a7d-4aa9-92a5-269b822e5d95-1623609211076%403c-app-gmx-bs04/T/" }, { "category": "external", "summary": "https://www.debian.org/security/2021/dsa-4941", "url": "https://www.debian.org/security/2021/dsa-4941" } ], "release_date": "2021-06-14T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-06-14T22:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2021-3178", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "notes": [ { "category": "description", "text": "fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-3178" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=51b2ee7d006a736a9126e8111d1f24e4fd0afaa6", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=51b2ee7d006a736a9126e8111d1f24e4fd0afaa6" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html", "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5SGB7TNDVQEOJ7NVTGX56UWHDNQM5TRC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5SGB7TNDVQEOJ7NVTGX56UWHDNQM5TRC/" }, { "category": "external", "summary": "https://patchwork.kernel.org/project/linux-nfs/patch/20210111210129.GA11652%40fieldses.org/", "url": "https://patchwork.kernel.org/project/linux-nfs/patch/20210111210129.GA11652%40fieldses.org/" } ], "release_date": "2021-01-19T07:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-01-19T07:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2021-33033", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-33033" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.14", "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.14" }, { "category": "external", "summary": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.7", "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.7" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1165affd484889d4986cf3b724318935a0b120d8", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1165affd484889d4986cf3b724318935a0b120d8" }, { "category": "external", "summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad5d07f4a9cd671233ae20983848874731102c08", "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad5d07f4a9cd671233ae20983848874731102c08" }, { "category": "external", "summary": "https://sites.google.com/view/syzscope/kasan-use-after-free-read-in-cipso_v4_genopt", "url": "https://sites.google.com/view/syzscope/kasan-use-after-free-read-in-cipso_v4_genopt" }, { "category": "external", "summary": "https://syzkaller.appspot.com/bug?id=96e7d345748d8814901c91cd92084ed04b46701e", "url": "https://syzkaller.appspot.com/bug?id=96e7d345748d8814901c91cd92084ed04b46701e" } ], "release_date": "2021-05-14T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2022-11-30T00:00:00Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.i686", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2022:1669850228" }, { "category": "none_available", "date": "2021-05-14T23:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:kernel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-debug-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-devel-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:kernel-headers-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:perf-0:2.6.32-754.35.2.el6.x86_64", "Oracle-Linux-6:python-perf-0:2.6.32-754.35.2.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }