Msrc Cbl2 Hyperv-Daemons 5.15.148.2-1 On Cbl Mariner 2.0 vulnerabilities

4 known vulnerabilities affecting msrc/cbl2_hyperv-daemons_5.15.148.2-1_on_cbl_mariner_2.0.

Total CVEs

4

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH3MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2024-26594HIGHCVSS 7.12024-02-13

CVE-2024-26594 [HIGH] CWE-125 ksmbd: validate mech token in session setup ksmbd: validate mech token in session setup FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. M

CVE-2024-26581HIGHCVSS 7.82024-02-13

CVE-2024-26581 [HIGH] CWE-416 netfilter: nft_set_rbtree: skip end interval element from gc netfilter: nft_set_rbtree: skip end interval element from gc FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries wi

CVE-2023-52447MEDIUMCVSS 6.72024-02-13

CVE-2023-52447 [MEDIUM] CWE-416 bpf: Defer the free of inner map when necessary bpf: Defer the free of inner map when necessary FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is c

CVE-2024-0565HIGHCVSS 7.42024-01-09

CVE-2024-0565 [MEDIUM] CWE-191 Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to o