Msrc Cbl2 Hyperv-Daemons 5.15.145.2-1 On Cbl Mariner 2.0 vulnerabilities

CVE-2023-51780 [HIGH] CWE-416 An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition. An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main be

CVE-2023-1193 [MEDIUM] CWE-416 Use-after-free in setup_async_work() Use-after-free in setup_async_work() FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is c

CVE-2023-6121 [MEDIUM] CWE-125 Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the

CVE-2023-32258 [HIGH] CWE-667 Session race condition remote code execution vulnerability Session race condition remote code execution vulnerability FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with w

CVE-2023-32254 [CRITICAL] CWE-362 Tree connection race condition remote code execution vulnerability Tree connection race condition remote code execution vulnerability FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open sou

CVE-2023-32257 [HIGH] CWE-667 Session race condition remote code execution vulnerability Session race condition remote code execution vulnerability FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with w

CVE-2023-32247 [HIGH] CWE-401 Session setup memory exhaustion denial-of-service vulnerability Session setup memory exhaustion denial-of-service vulnerability FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source librar

CVE-2023-32250 [CRITICAL] CWE-362 Session race condition remote code execution vulnerability Session race condition remote code execution vulnerability FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries wi

CVE-2023-32252 [HIGH] CWE-476 Session null pointer dereference denial-of-service vulnerability Session null pointer dereference denial-of-service vulnerability FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libr