Msrc Cbl2 Hyperv-Daemons 5.15.153.1-1 On Cbl Mariner 2.0 vulnerabilities

CVE-2024-26961 [HIGH] CWE-416 mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154: fix llsec key resources release in mac802154_llsec_key_del FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open s

CVE-2024-26951 [HIGH] wireguard: netlink: check for dangling peer via is_dead instead of empty list wireguard: netlink: check for dangling peer via is_dead instead of empty list FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of th

CVE-2024-26977 [MEDIUM] pci_iounmap(): Fix MMIO mapping leak pci_iounmap(): Fix MMIO mapping leak FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committe

CVE-2024-26993 [MEDIUM] fs: sysfs: Fix reference leak in sysfs_break_active_protection() fs: sysfs: Fix reference leak in sysfs_break_active_protection() FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries

CVE-2024-26973 [MEDIUM] fat: fix uninitialized field in nostale filehandles fat: fix uninitialized field in nostale filehandles FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is c

CVE-2024-26984 [MEDIUM] CWE-362 nouveau: fix instmem race condition around ptr stores nouveau: fix instmem race condition around ptr stores FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the

CVE-2024-26966 [MEDIUM] CWE-129 clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open sourc

CVE-2024-35912 [MEDIUM] CWE-401 wifi: iwlwifi: mvm: rfi: fix potential response leaks wifi: iwlwifi: mvm: rfi: fix potential response leaks FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the

CVE-2024-36008 [MEDIUM] CWE-476 ipv4: check for NULL idev in ip_route_use_hint() ipv4: check for NULL idev in ip_route_use_hint() FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is

CVE-2024-26965 [HIGH] clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source librarie

CVE-2024-27000 [HIGH] serial: mxs-auart: add spinlock around changing cts state serial: mxs-auart: add spinlock around changing cts state FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the d

CVE-2024-26594 [HIGH] CWE-125 ksmbd: validate mech token in session setup ksmbd: validate mech token in session setup FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. M

CVE-2024-26581 [HIGH] CWE-416 netfilter: nft_set_rbtree: skip end interval element from gc netfilter: nft_set_rbtree: skip end interval element from gc FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries wi

CVE-2023-52447 [MEDIUM] CWE-416 bpf: Defer the free of inner map when necessary bpf: Defer the free of inner map when necessary FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is c

CVE-2024-0565 [MEDIUM] CWE-191 Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to o

CVE-2023-3773 [MEDIUM] CWE-125 Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source librari

CVE-2023-3772 [MEDIUM] CWE-476 Kernel: xfrm: null pointer dereference in xfrm_update_ae_params() Kernel: xfrm: null pointer dereference in xfrm_update_ae_params() FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source l