Msrc Cbl2 Hyperv-Daemons 5.15.158.1-1 On Cbl Mariner 2.0 vulnerabilities

CVE-2024-27018 [HIGH] netfilter: br_netfilter: skip conntrack input hook for promisc packets netfilter: br_netfilter: skip conntrack input hook for promisc packets FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source

CVE-2024-26961 [HIGH] CWE-416 mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154: fix llsec key resources release in mac802154_llsec_key_del FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open s

CVE-2024-26951 [HIGH] wireguard: netlink: check for dangling peer via is_dead instead of empty list wireguard: netlink: check for dangling peer via is_dead instead of empty list FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of th

CVE-2024-26977 [MEDIUM] pci_iounmap(): Fix MMIO mapping leak pci_iounmap(): Fix MMIO mapping leak FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committe

CVE-2024-26993 [MEDIUM] fs: sysfs: Fix reference leak in sysfs_break_active_protection() fs: sysfs: Fix reference leak in sysfs_break_active_protection() FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries

CVE-2024-26973 [MEDIUM] fat: fix uninitialized field in nostale filehandles fat: fix uninitialized field in nostale filehandles FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is c

CVE-2024-26984 [MEDIUM] CWE-362 nouveau: fix instmem race condition around ptr stores nouveau: fix instmem race condition around ptr stores FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the

CVE-2024-26966 [MEDIUM] CWE-129 clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open sourc

CVE-2024-35912 [MEDIUM] CWE-401 wifi: iwlwifi: mvm: rfi: fix potential response leaks wifi: iwlwifi: mvm: rfi: fix potential response leaks FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the

CVE-2024-36008 [MEDIUM] CWE-476 ipv4: check for NULL idev in ip_route_use_hint() ipv4: check for NULL idev in ip_route_use_hint() FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is

CVE-2024-26965 [HIGH] clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source librarie

CVE-2024-27000 [HIGH] serial: mxs-auart: add spinlock around changing cts state serial: mxs-auart: add spinlock around changing cts state FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the d

CVE-2023-4155 [MEDIUM] CWE-367 Sev-es / sev-snp vmgexit double fetch vulnerability Sev-es / sev-snp vmgexit double fetch vulnerability FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the dist

CVE-2023-3269 [HIGH] CWE-416 Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of

CVE-2023-3773 [MEDIUM] CWE-125 Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source librari

CVE-2023-3772 [MEDIUM] CWE-476 Kernel: xfrm: null pointer dereference in xfrm_update_ae_params() Kernel: xfrm: null pointer dereference in xfrm_update_ae_params() FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source l

CVE-2023-33952 [MEDIUM] CWE-415 Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versio

CVE-2023-33951 [MEDIUM] CWE-362 Kernel: vmwgfx: race condition leading to information disclosure vulnerability Kernel: vmwgfx: race condition leading to information disclosure vulnerability FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure ve

CVE-2023-35826 [HIGH] CWE-362 An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c. An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefi

CVE-2023-3338 [MEDIUM] CWE-476 Crash due to a null pointer dereference in the dn_nsp_send function Crash due to a null pointer dereference in the dn_nsp_send function FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open sour