ELSA-2022-9729: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2022-9728: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2022-9727: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2022-9726: Unbreakable Enterprise kernel security update (IMPORTANT)

Уязвимость ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

ELSA-2022-9761: Unbreakable Enterprise kernel security update (IMPORTANT)

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer crash In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sg_write_same --ndob" we will crash in target_core_iblock/file's execute_write_same handlers when we go to access the se_cmd->t_data_sg because its NULL. This patch adds a check for the NDOB bit in the common WRITE SAME code because we don't support it. And, it adds a check for zero SG elements in each handler in case the initiator tries to send a normal WRITE SAME with no data buffer.

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer crash In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sg_write_same --ndob" we will crash in target_core_iblock/file's execute_write_same handlers when we go to access the se_cmd->t_data_sg because its NULL. This patch adds a check for the NDOB bit in the common WRITE SAME code because we don't support it. And, it adds a check for zero SG elements in each handler in case the initiator tries to send a normal WRITE SAME with no data buffer.

In the Linux kernel, the following vulnerability has been resolved: s ...

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

It was discovered that the cls_route filter implementation in the Linu ...

In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sg_write_same --ndob" we will crash in target_core_iblock/file's execute_write_same handlers when we go to access the se_cmd->t_data_sg because its NULL. CVSS 3.1 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

ELSA-2022-9699: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2022-9694: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2022-9693: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2022-9692: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2022-9691: Unbreakable Enterprise kernel-container security update (IMPORTANT)