<?xml version="1.0" encoding="UTF-8"?>
<updates>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="enhancement" version="1.0">
  <id>ANEA-2022:0595</id>
  <title>ANEA-2022:0595: ANEA: new package: nerdctl (Enhancement)</title>
  <issued date="2022-07-29"/>
  <updated date="2022-07-29 14:50:03" timestamp="1659077403"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Enhancement</severity>
  <summary>ANEA: new package: nerdctl</summary>
  <description>nerdctl: Docker-compatible CLI for containerd.
  </description>
  <pkglist>
    <collection short="anolis8.6">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="nerdctl" version="0.22.0" release="4.an8" repo="Experimental" src="">
        <filename>nerdctl-0.22.0-4.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="nerdctl" version="0.22.0" release="4.an8" repo="Experimental" src="">
        <filename>nerdctl-0.22.0-4.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="nerdctl" version="0.22.0" release="4.an8" repo="Experimental" src="">
        <filename>nerdctl-0.22.0-4.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2022:0586</id>
  <title>ANSA-2022:0586: kernel security and bug fix update (Important)</title>
  <issued date="2022-07-18"/>
  <updated date="2022-07-18 17:39:39" timestamp="1658137179"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>kernel security and bug fix update</summary>
  <description>An update for kernel package is now avaiable for Anolis OS 8 that fix CVE-2022-34918:

CVE-2022-34918:
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2022-0586.xml" id="ANSA-2022:0586" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34918" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-34918" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.6">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="bpftool" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>bpftool-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="bpftool" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>bpftool-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kernel" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-5.10.112-11.1.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-core" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-core-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-core" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-core-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-core" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-core-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-core" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-core-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-devel" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-devel-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-devel" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-devel-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-extra" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-extra-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-extra" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-extra-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-internal" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-internal-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-internal" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-internal-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-devel" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-devel-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-devel" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-devel-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-headers" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-headers-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-headers" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-headers-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-modules-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-modules-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules-extra" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-modules-extra-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules-extra" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-modules-extra-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-libs-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-libs-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs-devel" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-libs-devel-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs-devel" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-libs-devel-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="perf" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>perf-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="perf" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>perf-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="python3-perf" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>python3-perf-5.10.112-11.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="python3-perf" version="5.10.112" release="11.1.an8" repo="Experimental" src="">
        <filename>python3-perf-5.10.112-11.1.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2022:0678</id>
  <title>ANSA-2022:0678: ANSA: new package: kernel-5.10.134-12 (Important)</title>
  <issued date="2022-09-08"/>
  <updated date="2022-09-08 11:05:20" timestamp="1662606320"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>ANSA: new package: kernel-5.10.134-12</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports:

CVE-2021-33655:
When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.

CVE-2021-33656:
When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

CVE-2022-0494:
A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.

CVE-2022-0500:
A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.

CVE-2022-1012:
A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem.

CVE-2022-1184:
A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.

CVE-2022-1462:
An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.

CVE-2022-1652:
Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

CVE-2022-1729:
A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERF_TYPE_TRACEPOINT and sub PERF_EVENT_HARDWARE plus the PERF_EVENT_SOFTWARE using the perf_event_open() function with these three types. This flaw allows a local user to crash the system.

CVE-2022-1734:
A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.

CVE-2022-1786:
A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task completing submissions on this ring. This flaw allows a local user to crash or escalate their privileges on the system.

CVE-2022-1789:
With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.

CVE-2022-1836:
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-33981. Reason: This candidate is a reservation duplicate of CVE-2022-33981. Notes: All CVE users should reference CVE-2022-33981 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2022-1966:
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2022-1972:
CVE-2022-1972 is duplicate of CVE-2022-2078, so please consider CVE-2022-2078 instead. 

CVE-2022-1974:
A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.

CVE-2022-1975:
No description is available for this CVE.

CVE-2022-2078:
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

CVE-2022-21123:
Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVE-2022-21125:
Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVE-2022-21166:
Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVE-2022-21499:
KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).

CVE-2022-21505:
A bug in the IMA subsystem was discovered which would incorrectly allow kexec to be used when kernel lockdown was enabled

CVE-2022-2153:
A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.

CVE-2022-2318:
There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.

CVE-2022-23816:
A flaw was found in hw. Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.

CVE-2022-2503:
Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allows root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates.

CVE-2022-2586:
A use-after-free flaw was found in nf_tables cross-table in the net/netfilter/nf_tables_api.c function in the Linux kernel. This flaw allows a local, privileged attacker to cause a use-after-free problem at the time of table deletion, possibly leading to local privilege escalation.

CVE-2022-2588:
A use-after-free flaw was found in route4_change in the net/sched/cls_route.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem.

CVE-2022-26365:
Linux disk/nic frontends data leaks [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).

CVE-2022-2639:
An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2022-28893:
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.

CVE-2022-29581:
Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.

CVE-2022-2959:
A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the system or escalate their privileges on the system.

CVE-2022-2978:
A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CVE-2022-29900:
Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.

CVE-2022-29901:
Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.

CVE-2022-32250:
net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.

CVE-2022-32296:
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used.

CVE-2022-32981:
An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in ptrace PEEKUSER and POKEUSER (aka PEEKUSR and POKEUSR) when accessing floating point registers.

CVE-2022-33740:
Linux disk/nic frontends data leaks [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).

CVE-2022-33741:
Linux disk/nic frontends data leaks [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).

CVE-2022-33742:
Linux disk/nic frontends data leaks [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).

CVE-2022-33743:
network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP (eXpress Data Path), a code label was moved in a way allowing for SKBs having references (pointers) retained for further processing to nevertheless be freed.

CVE-2022-33744:
Linux disk/nic frontends data leaks [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).

CVE-2022-33981:
drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function.

CVE-2022-34918:
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

CVE-2022-36123:
The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of service or gain privileges.

CVE-2022-36879:
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

CVE-2022-36946:
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb-&gt;len.
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2022-0678.xml" id="ANSA-2022:0678" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33655" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2021-33655" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33656" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2021-33656" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0494" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-0494" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0500" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-0500" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1012" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" id="CVE-2022-1012" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1184" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-1184" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1462" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-1462" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1652" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" id="CVE-2022-1652" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1729" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-1729" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1734" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-1734" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1786" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-1786" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1789" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" id="CVE-2022-1789" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1836" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-1836" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1966" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-1966" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1972" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" id="CVE-2022-1972" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1974" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-1974" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1975" cvss3="4.5/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-1975" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2078" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-2078" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21123" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" id="CVE-2022-21123" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21125" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-21125" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21166" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-21166" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21499" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-21499" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21505" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-21505" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2153" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-2153" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2318" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-2318" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23816" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" id="CVE-2022-23816" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2503" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-2503" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-2586" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-2588" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26365" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-26365" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2639" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-2639" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28893" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-28893" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29581" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-29581" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2959" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-2959" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2978" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-2978" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29900" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" id="CVE-2022-29900" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29901" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" id="CVE-2022-29901" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32250" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-32250" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32296" cvss3="0.0/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N" id="CVE-2022-32296" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32981" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-32981" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33740" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-33740" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33741" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-33741" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33742" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-33742" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33743" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-33743" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33744" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-33744" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33981" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-33981" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34918" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-34918" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36123" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-36123" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36879" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-36879" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-36946" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.6">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="bpftool" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>bpftool-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="bpftool" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>bpftool-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kernel" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-5.10.134-12.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-core" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-core-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-core" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-core-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-debug-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-debug-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-core" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-debug-core-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-core" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-debug-core-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-devel" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-debug-devel-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-devel" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-debug-devel-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-debug-modules-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-debug-modules-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-debug-modules-extra-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-debug-modules-extra-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-devel" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-devel-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-devel" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-devel-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-headers" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-headers-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-headers" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-headers-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-modules-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-modules-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules-extra" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-modules-extra-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules-extra" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-modules-extra-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="12.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="12.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-tools-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-tools-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-tools-libs-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-tools-libs-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-tools-libs-devel-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>kernel-tools-libs-devel-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="perf" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>perf-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="perf" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>perf-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="python3-perf" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>python3-perf-5.10.134-12.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="python3-perf" version="5.10.134" release="12.an8" repo="Plus" src="">
        <filename>python3-perf-5.10.134-12.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2023:0123</id>
  <title>ANSA-2023:0123: kernel hotfix security update (Important)</title>
  <issued date="2023-04-19"/>
  <updated date="2023-04-19 16:05:37" timestamp="1681891537"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>kernel hotfix security update</summary>
  <description>Package updates are available for Anolis 8 that fix the following vulnerabilities:

CVE-2023-0461:
There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege. There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock. When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable. The setsockopt TCP_ULP operation does not require any privilege. We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2023-0123.xml" id="ANSA-2023:0123" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0461" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0461" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="x86_64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.112-11.1" version="1.0" release="20230314212650.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.112-11.1-1.0-20230314212650.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.112-11.1" version="1.0" release="20230315160142.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.112-11.1-1.0-20230315160142.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.112-11.2" version="1.0" release="20230314213449.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.112-11.2-1.0-20230314213449.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.112-11.2" version="1.0" release="20230315161228.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.112-11.2-1.0-20230315161228.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.134-12" version="1.0" release="20230314223120.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.134-12-1.0-20230314223120.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.134-12" version="1.0" release="20230315161902.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.134-12-1.0-20230315161902.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.134-12.1" version="1.0" release="20230314224114.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.134-12.1-1.0-20230314224114.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.134-12.1" version="1.0" release="20230315162545.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.134-12.1-1.0-20230315162545.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.134-12.2" version="1.0" release="20230314215500.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.134-12.2-1.0-20230314215500.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.134-12.2" version="1.0" release="20230315163224.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.134-12.2-1.0-20230315163224.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.134-13" version="1.0" release="20230315101838.an8" repo="kernel-5.10" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.134-13-1.0-20230315101838.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.134-13" version="1.0" release="20230315163901.an8" repo="kernel-5.10" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.134-13-1.0-20230315163901.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.134-13.1" version="1.0" release="20230314175726.an8" repo="kernel-5.10" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.134-13.1-1.0-20230314175726.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.134-13.1" version="1.0" release="20230315164553.an8" repo="kernel-5.10" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.134-13.1-1.0-20230315164553.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.60-9" version="1.0" release="20230314172453.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.60-9-1.0-20230314172453.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.60-9" version="1.0" release="20230315153821.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.60-9-1.0-20230315153821.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.84-10.2" version="1.0" release="20230315105415.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.84-10.2-1.0-20230315105415.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.84-10.2" version="1.0" release="20230315153052.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.84-10.2-1.0-20230315153052.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.84-10.3" version="1.0" release="20230314211605.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.84-10.3-1.0-20230314211605.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-hotfix-CVE-2023-0461-5.10.84-10.3" version="1.0" release="20230315160707.an8" repo="Experimental" src="">
        <filename>kernel-hotfix-CVE-2023-0461-5.10.84-10.3-1.0-20230315160707.an8.aarch64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2023:0472</id>
  <title>ANBA-2023:0472: kernel bugfix update (Bug Fix)</title>
  <issued date="2023-08-17"/>
  <updated date="2023-08-17 14:32:02" timestamp="1692253922"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>kernel bugfix update</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports.
  </description>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="bpftool" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="bpftool" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kernel" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-15.1.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-core" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-core" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-core" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-core" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-devel" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-devel" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-devel" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-devel" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-headers" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-headers" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules-extra" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules-extra" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="perf" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="perf" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="python3-perf" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-15.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="python3-perf" version="5.10.134" release="15.1.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-15.1.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2023:0840</id>
  <title>ANBA-2023:0840: ANBA: kernel bug fix update: kernel-5.10.134-16.1 (Bug Fix)</title>
  <issued date="2023-12-11"/>
  <updated date="2023-12-11 10:05:33" timestamp="1702260333"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>ANBA: kernel bug fix update: kernel-5.10.134-16.1</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports
  </description>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="bpftool" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="bpftool" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kernel" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.1.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-core" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-core" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-core" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-core" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-devel" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-devel" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-devel" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-devel" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-headers" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-headers" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules-extra" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules-extra" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="perf" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="perf" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="python3-perf" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="python3-perf" version="5.10.134" release="16.1.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.1.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2023:0946</id>
  <title>ANBA-2023:0946: kmod-intel-QAT20 enhancement update (Bug Fix)</title>
  <issued date="2023-12-21"/>
  <updated date="2023-12-21 15:21:17" timestamp="1703143277"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>kmod-intel-QAT20 enhancement update</summary>
  <description>Change spec for oot weak module and do some typo fix
  </description>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="src" epoch="" name="kmod-intel-QAT20" version="5.10.134~16" release="L.0.9.4~00004~2.an8" repo="kernel-5.10" src="">
        <filename>kmod-intel-QAT20-5.10.134~16-L.0.9.4~00004~2.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kmod-intel-QAT20" version="5.10.134~16" release="L.0.9.4~00004~2.an8" repo="kernel-5.10" src="">
        <filename>kmod-intel-QAT20-5.10.134~16-L.0.9.4~00004~2.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2023:0947</id>
  <title>ANBA-2023:0947: kmod-intel_dlb2 enhancement update (Bug Fix)</title>
  <issued date="2023-12-21"/>
  <updated date="2023-12-21 15:21:41" timestamp="1703143301"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>kmod-intel_dlb2 enhancement update</summary>
  <description>Change qat_4xxx fw patch; Change spec for oot weak module
  </description>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="src" epoch="" name="kmod-intel_dlb2" version="5.10.134~16" release="8.2.0~1.an8" repo="kernel-5.10" src="">
        <filename>kmod-intel_dlb2-5.10.134~16-8.2.0~1.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kmod-intel_dlb2" version="5.10.134~16" release="8.2.0~1.an8" repo="kernel-5.10" src="">
        <filename>kmod-intel_dlb2-5.10.134~16-8.2.0~1.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2023:0948</id>
  <title>ANBA-2023:0948: kmod-udma enhancement update (Bug Fix)</title>
  <issued date="2023-12-21"/>
  <updated date="2023-12-21 15:22:06" timestamp="1703143326"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>kmod-udma enhancement update</summary>
  <description>Change spec to OOT weak module
  </description>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="src" epoch="" name="kmod-udma" version="5.10.134~16" release="0.1.0~2.an8" repo="kernel-5.10" src="">
        <filename>kmod-udma-5.10.134~16-0.1.0~2.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kmod-udma" version="5.10.134~16" release="0.1.0~2.an8" repo="kernel-5.10" src="">
        <filename>kmod-udma-5.10.134~16-0.1.0~2.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2023:0949</id>
  <title>ANBA-2023:0949: kmod-ast enhancement update (Bug Fix)</title>
  <issued date="2023-12-21"/>
  <updated date="2023-12-21 15:39:29" timestamp="1703144369"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>kmod-ast enhancement update</summary>
  <description>Change spec weak-module; add Conflicts to avoid install unexpected kernel; remove pkgversion in spec; update spec and chmod -x
  </description>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="kmod-ast" version="5.10.134~16" release="1.13.1~1.an8" repo="kernel-5.10" src="">
        <filename>kmod-ast-5.10.134~16-1.13.1~1.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kmod-ast" version="5.10.134~16" release="1.13.1~1.an8" repo="kernel-5.10" src="">
        <filename>kmod-ast-5.10.134~16-1.13.1~1.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kmod-ast" version="5.10.134~16" release="1.13.1~1.an8" repo="kernel-5.10" src="">
        <filename>kmod-ast-5.10.134~16-1.13.1~1.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2024:0091</id>
  <title>ANBA-2024:0091: kernel bug fix update: kernel-5.10.134-16.2 (Bug Fix)</title>
  <issued date="2024-03-05"/>
  <updated date="2024-03-05 18:14:39" timestamp="1709633679"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>kernel bug fix update: kernel-5.10.134-16.2</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports
  </description>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="0" name="bpftool" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="bpftool" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="0" name="kernel" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.2.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-core" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-core" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-core" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-core" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-devel" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-devel" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-headers" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-headers" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="perf" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="perf" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="python3-perf" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="python3-perf" version="5.10.134" release="16.2.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.2.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="enhancement" version="1.0">
  <id>ANEA-2023:0945</id>
  <title>ANEA-2023:0945: new package: kmod-mpt3sas (Enhancement)</title>
  <issued date="2023-12-21"/>
  <updated date="2023-12-21 15:20:52" timestamp="1703143252"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Enhancement</severity>
  <summary>new package: kmod-mpt3sas</summary>
  <description>kmod-mpt3sas for kernel 5.10.134-16
  </description>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="kmod-mpt3sas" version="5.10.134~16" release="43.00.00.00~1.an8" repo="kernel-5.10" src="">
        <filename>kmod-mpt3sas-5.10.134~16-43.00.00.00~1.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kmod-mpt3sas" version="5.10.134~16" release="43.00.00.00~1.an8" repo="kernel-5.10" src="">
        <filename>kmod-mpt3sas-5.10.134~16-43.00.00.00~1.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kmod-mpt3sas" version="5.10.134~16" release="43.00.00.00~1.an8" repo="kernel-5.10" src="">
        <filename>kmod-mpt3sas-5.10.134~16-43.00.00.00~1.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2023:0006</id>
  <title>ANSA-2023:0006: ANSA: kernel security and bug fix update: kernel-5.10.134-13 (Important)</title>
  <issued date="2023-01-10"/>
  <updated date="2023-01-10 09:46:49" timestamp="1673315209"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>ANSA: kernel security and bug fix update: kernel-5.10.134-13</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports.

CVE-2021-4037:
A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.

CVE-2022-0171:
A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV).

CVE-2022-1679:
A use-after-free flaw was found in the Linux kernel?s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2022-2585:
A use-after-free flaw was found in the Linux kernel?s POSIX CPU timers functionality in the way a user creates and then deletes the timer in the non-leader thread of the program. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2022-2586:
A use-after-free flaw was found in nf_tables cross-table in the net/netfilter/nf_tables_api.c function in the Linux kernel. This flaw allows a local, privileged attacker to cause a use-after-free problem at the time of table deletion, possibly leading to local privilege escalation.

CVE-2022-2588:
A use-after-free flaw was found in route4_change in the net/sched/cls_route.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem.

CVE-2022-2602:
A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.

CVE-2022-26373:
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

CVE-2022-2663:
An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured.

CVE-2022-2905:
An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.

CVE-2022-2978:
A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CVE-2022-3028:
A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.

CVE-2022-3061:
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error.

CVE-2022-3169:
A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver, resulting in a PCIe link disconnect.

CVE-2022-3176:
There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunately, the io_uring poll doesn't handle POLLFREE. This allows a use-after-free to occur if a signalfd or binder fd is polled with io_uring poll, and the waitqueue gets freed. We recommend upgrading past commit fc78b2fc21f10c4c9c4d5d659a685710ffa63659

CVE-2022-3435:
A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability.

CVE-2022-3521:
A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c of the component kcm. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211018 is the identifier assigned to this vulnerability.

CVE-2022-3524:
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability.

CVE-2022-3534:
A vulnerability classified as critical has been found in Linux Kernel. Affected is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211032.

CVE-2022-3535:
A vulnerability classified as problematic was found in Linux Kernel. Affected by this vulnerability is the function mvpp2_dbgfs_port_init of the file drivers/net/ethernet/marvell/mvpp2/mvpp2_debugfs.c of the component mvpp2. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier VDB-211033 was assigned to this vulnerability.

CVE-2022-3542:
A memory leak flaw was found in bnx2x_tpa_stop in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c in the bnx2x sub-component in the Linux Kernel. This flaw may allow a local attacker to cause a denial of service.

CVE-2022-3545:
A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.

CVE-2022-3564:
A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

CVE-2022-3565:
A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function del_timer of the file drivers/isdn/mISDN/l1oip_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211088.

CVE-2022-3566:
A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier VDB-211089 was assigned to this vulnerability.

CVE-2022-3567:
A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the identifier assigned to this vulnerability.

CVE-2022-3586:
A flaw was found in the Linux kernel?s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service.

CVE-2022-3594:
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363.

CVE-2022-3621:
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file fs/nilfs2/inode.c of the component nilfs2. The manipulation leads to null pointer dereference. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211920.

CVE-2022-3623:
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte of the file mm/gup.c of the component BPF. The manipulation leads to race condition. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211921 was assigned to this vulnerability.

CVE-2022-3625:
A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlink_param_set/devlink_param_get of the file net/core/devlink.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211929 was assigned to this vulnerability.

CVE-2022-3628:
A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges.

CVE-2022-3629:
A vulnerability was found in Linux Kernel. It has been declared as problematic. This vulnerability affects the function vsock_connect of the file net/vmw_vsock/af_vsock.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. VDB-211930 is the identifier assigned to this vulnerability.

CVE-2022-3633:
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939_session_destroy of the file net/can/j1939/transport.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211932.

CVE-2022-3635:
A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the identifier assigned to this vulnerability.

CVE-2022-3646:
A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function nilfs_attach_log_writer of the file fs/nilfs2/segment.c of the component BPF. The manipulation leads to memory leak. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211961 was assigned to this vulnerability.

CVE-2022-3649:
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211992.

CVE-2022-36946:
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb-&gt;len.

CVE-2022-39189:
An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.

CVE-2022-39190:
An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain.

CVE-2022-39842:
** DISPUTED ** An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.

CVE-2022-40307:
An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.

CVE-2022-40768:
drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.

CVE-2022-41222:
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.

CVE-2022-41674:
An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.

CVE-2022-42719:
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.

CVE-2022-42720:
Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.

CVE-2022-42721:
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.

CVE-2022-42722:
In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices.

CVE-2022-42895:
There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url

CVE-2022-42896:
There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim. We recommend upgrading past commit https://www.google.com/url https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url

CVE-2022-43750:
drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.

CVE-2022-4378:
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2023-0006.xml" id="ANSA-2023:0006" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4037" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" id="CVE-2021-4037" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0171" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-0171" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1679" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-1679" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2585" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-2585" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-2586" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-2588" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-2602" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26373" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-26373" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2663" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" id="CVE-2022-2663" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2905" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-2905" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2978" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-2978" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3028" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3028" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3061" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3061" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3169" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3169" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3176" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3176" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3435" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-3435" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3521" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3521" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3524" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3524" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3534" cvss3="8.0/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3534" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3535" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3535" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3542" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3542" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3545" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3545" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3564" cvss3="7.1/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3564" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3565" cvss3="8.0/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3565" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3566" cvss3="4.6/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" id="CVE-2022-3566" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3567" cvss3="5.9/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" id="CVE-2022-3567" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3586" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3586" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3594" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3594" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3621" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3621" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3623" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3623" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3625" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3625" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3628" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3628" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3629" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3629" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3633" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3633" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3635" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3635" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3646" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3646" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3649" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3649" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-36946" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39189" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-39189" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39190" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-39190" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39842" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" id="CVE-2022-39842" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40307" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-40307" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40768" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-40768" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41222" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-41222" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41674" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-41674" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42719" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-42719" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42720" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-42720" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42721" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-42721" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42722" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-42722" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42895" cvss3="5.3/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-42895" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42896" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" id="CVE-2022-42896" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43750" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-43750" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4378" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-4378" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.6">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="bpftool" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>bpftool-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="bpftool" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>bpftool-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kernel" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-5.10.134-13.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-core" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-core-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-core" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-core-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-debug-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-debug-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-core" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-debug-core-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-core" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-debug-core-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-devel" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-debug-devel-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-devel" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-debug-devel-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-extra-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-extra-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-devel" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-devel-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-devel" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-devel-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-headers" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-headers-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-headers" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-headers-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-modules-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-modules-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules-extra" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-modules-extra-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules-extra" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-modules-extra-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="13.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="13.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-tools-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-tools-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-tools-libs-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>kernel-tools-libs-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="perf" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>perf-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="perf" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>perf-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="python3-perf" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>python3-perf-5.10.134-13.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="python3-perf" version="5.10.134" release="13.an8" repo="Experimental" src="">
        <filename>python3-perf-5.10.134-13.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2023:0029</id>
  <title>ANSA-2023:0029: ANSA: kernel security and bug fix update: kernel-5.10.134-13.1 (Important)</title>
  <issued date="2023-02-09"/>
  <updated date="2023-02-09 14:38:48" timestamp="1675924728"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>ANSA: kernel security and bug fix update: kernel-5.10.134-13.1</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports.

CVE-2022-4696:
There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is missing the IO_WQ_WORK_FILES flag, which signals that the operation won't use current-&gt;nsproxy, so its reference counter is not increased. This assumption is not always true as calling io_splice on specific files will call the get_uts function which will use current-&gt;nsproxy leading to invalidly decreasing its reference counter later causing the use-after-free vulnerability. We recommend upgrading to version 5.10.160 or above
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2023-0029.xml" id="ANSA-2023:0029" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4696" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-4696" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.6">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="bpftool" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>bpftool-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="bpftool" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>bpftool-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kernel" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-5.10.134-13.1.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-core" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-core-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-core" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-core-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-core" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-core-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-core" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-core-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-devel" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-devel-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-devel" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-devel-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-extra-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-debug-modules-extra-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-devel" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-devel-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-devel" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-devel-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-headers" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-headers-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-headers" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-headers-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-modules-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-modules-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules-extra" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-modules-extra-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules-extra" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-modules-extra-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="13.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="13.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-libs-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-libs-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-libs-devel-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>kernel-tools-libs-devel-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="perf" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>perf-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="perf" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>perf-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="python3-perf" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>python3-perf-5.10.134-13.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="python3-perf" version="5.10.134" release="13.1.an8" repo="Experimental" src="">
        <filename>python3-perf-5.10.134-13.1.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2023:0140</id>
  <title>ANSA-2023:0140: ANSA: kernel security and bug fix update: kernel-5.10.134-14 (Important)</title>
  <issued date="2023-04-28"/>
  <updated date="2023-04-28 13:56:20" timestamp="1682661380"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>ANSA: kernel security and bug fix update: kernel-5.10.134-14</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports

CVE-2021-33061:
Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access.

CVE-2021-3759:
A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.

CVE-2022-0171:
A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV).

CVE-2022-1184:
A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.

CVE-2022-1679:
A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2022-2196:
A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or past commit 2e7eab81425a

CVE-2022-2663:
An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured.

CVE-2022-2905:
An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.

CVE-2022-3028:
A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.

CVE-2022-3061:
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error.

CVE-2022-3169:
A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver, resulting in a PCIe link disconnect.

CVE-2022-3303:
A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

CVE-2022-3435:
A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability.

CVE-2022-3521:
A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c of the component kcm. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211018 is the identifier assigned to this vulnerability.

CVE-2022-3523:
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211020.

CVE-2022-3524:
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability.

CVE-2022-3534:
A vulnerability classified as critical has been found in Linux Kernel. Affected is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211032.

CVE-2022-3535:
A vulnerability classified as problematic was found in Linux Kernel. Affected by this vulnerability is the function mvpp2_dbgfs_port_init of the file drivers/net/ethernet/marvell/mvpp2/mvpp2_debugfs.c of the component mvpp2. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier VDB-211033 was assigned to this vulnerability.

CVE-2022-3545:
A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.

CVE-2022-3564:
A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

CVE-2022-3565:
A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function del_timer of the file drivers/isdn/mISDN/l1oip_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211088.

CVE-2022-3566:
A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier VDB-211089 was assigned to this vulnerability.

CVE-2022-3567:
A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the identifier assigned to this vulnerability.

CVE-2022-3586:
A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service.

CVE-2022-3594:
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363.

CVE-2022-3623:
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte of the file mm/gup.c of the component BPF. The manipulation leads to race condition. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211921 was assigned to this vulnerability.

CVE-2022-3628:
A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges.

CVE-2022-3633:
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939_session_destroy of the file net/can/j1939/transport.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211932.

CVE-2022-3635:
A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the identifier assigned to this vulnerability.

CVE-2022-3643:
Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.

CVE-2022-3707:
A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash the system.

CVE-2022-39189:
An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.

CVE-2022-39190:
An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain.

CVE-2022-39842:
** DISPUTED ** An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.

CVE-2022-40307:
An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.

CVE-2022-40768:
drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.

CVE-2022-4095:
A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges.

CVE-2022-41218:
In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.

CVE-2022-4129:
A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service.

CVE-2022-4139:
An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system.

CVE-2022-41674:
An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.

CVE-2022-41849:
drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open(), aka a race condition between ufx_ops_open and ufx_usb_disconnect.

CVE-2022-42328:
Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).

CVE-2022-42329:
Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).

CVE-2022-42703:
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.

CVE-2022-42719:
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.

CVE-2022-42720:
Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.

CVE-2022-42721:
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.

CVE-2022-42722:
In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices.

CVE-2022-42895:
There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url

CVE-2022-42896:
There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim. We recommend upgrading past commit https://www.google.com/url https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url

CVE-2022-4378:
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2022-45934:
An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.

CVE-2022-4662:
A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.

CVE-2022-4696:
There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is missing the IO_WQ_WORK_FILES flag, which signals that the operation won't use current-&gt;nsproxy, so its reference counter is not increased. This assumption is not always true as calling io_splice on specific files will call the get_uts function which will use current-&gt;nsproxy leading to invalidly decreasing its reference counter later causing the use-after-free vulnerability. We recommend upgrading to version 5.10.160 or above

CVE-2022-4744:
A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2022-47518:
An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when copying the list of operating channels from Wi-Fi management frames.

CVE-2022-47519:
An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frames.

CVE-2022-47520:
An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet.

CVE-2022-47521:
An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames.

CVE-2022-47946:
An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in io_sqpoll_wait_sq in fs/io_uring.c allows an attacker to crash the kernel, resulting in denial of service. finish_wait can be skipped. An attack can occur in some situations by forking a process and then quickly terminating it. NOTE: later kernel versions, such as the 5.15 longterm series, substantially changed the implementation of io_sqpoll_wait_sq.

CVE-2023-0179:
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.

CVE-2023-0266:
A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e

CVE-2023-0394:
A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash.

CVE-2023-0461:
There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege. There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock. When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable. The setsockopt TCP_ULP operation does not require any privilege. We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c

CVE-2023-0590:
A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected.

CVE-2023-0597:
A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data. A local user could use this flaw to get access to some important data with expected location in memory.

CVE-2023-1073:
A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2023-1074:
A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networking service and someone connects to this service. This could allow a local user to starve resources, causing a denial of service.

CVE-2023-1076:
A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.

CVE-2023-1077:
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.

CVE-2023-1095:
In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.

CVE-2023-1118:
A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CVE-2023-1281:
Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2.

CVE-2023-23000:
In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error case, but an error pointer is used.

CVE-2023-23004:
In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

CVE-2023-23454:
cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).

CVE-2023-23455:
atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).

CVE-2023-23559:
In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2023-0140.xml" id="ANSA-2023:0140" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33061" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2021-33061" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3759" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2021-3759" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0171" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-0171" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1184" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-1184" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1679" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-1679" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2196" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" id="CVE-2022-2196" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2663" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" id="CVE-2022-2663" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2905" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-2905" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3028" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3028" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3061" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3061" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3169" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3169" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3303" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3303" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3435" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-3435" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3521" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3521" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3523" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3523" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3524" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3524" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3534" cvss3="5.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" id="CVE-2022-3534" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3535" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3535" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3545" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3545" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3564" cvss3="7.1/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3564" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3565" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3565" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3566" cvss3="4.6/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" id="CVE-2022-3566" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3567" cvss3="5.9/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" id="CVE-2022-3567" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3586" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3586" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3594" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3594" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3623" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" id="CVE-2022-3623" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3628" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3628" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3633" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" id="CVE-2022-3633" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3635" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3635" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3643" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3643" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3707" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3707" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39189" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-39189" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39190" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-39190" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39842" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" id="CVE-2022-39842" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40307" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-40307" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40768" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-40768" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4095" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H" id="CVE-2022-4095" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41218" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-41218" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4129" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-4129" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4139" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-4139" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41674" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-41674" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41849" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-41849" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42328" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-42328" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42329" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-42329" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42703" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-42703" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42719" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-42719" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42720" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-42720" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42721" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-42721" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42722" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-42722" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42895" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" id="CVE-2022-42895" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42896" cvss3="8.1/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" id="CVE-2022-42896" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4378" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-4378" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45934" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-45934" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4662" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-4662" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4696" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-4696" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-4744" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47518" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-47518" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47519" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-47519" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47520" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2022-47520" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47521" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-47521" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47946" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-47946" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0179" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0179" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0266" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0266" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-0394" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0461" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0461" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0590" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0590" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0597" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-0597" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1073" cvss3="6.3/CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1073" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1074" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1074" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1076" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-1076" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1077" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1077" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1095" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1095" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1118" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1118" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1281" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23000" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-23000" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23004" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-23004" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23454" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" id="CVE-2023-23454" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23455" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" id="CVE-2023-23455" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-23559" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="bpftool" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="bpftool" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kernel" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-14.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-core" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-core" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-core" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-core" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-devel" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-devel" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-devel" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-devel" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-headers" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-headers" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules-extra" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules-extra" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="perf" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="perf" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="python3-perf" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-14.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="python3-perf" version="5.10.134" release="14.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-14.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2023:0200</id>
  <title>ANSA-2023:0200: ANSA: kernel security and bug fix update: kernel-5.10.134-14.1 (Important)</title>
  <issued date="2023-05-29"/>
  <updated date="2023-05-29 13:53:23" timestamp="1685339603"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>ANSA: kernel security and bug fix update: kernel-5.10.134-14.1</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports

CVE-2022-47929:
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdisc_graft in net/sched/sch_api.c.

CVE-2023-0386:
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

CVE-2023-1075:
A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field that overlaps with rec-&gt;tx_ready.

CVE-2023-1380:
A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info-&gt;req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.

CVE-2023-26545:
In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new location) during the renaming of a device.

CVE-2023-28466:
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).

CVE-2023-30456:
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.

CVE-2023-32233:
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2023-0200.xml" id="ANSA-2023:0200" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47929" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" id="CVE-2022-47929" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0386" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0386" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1075" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" id="CVE-2023-1075" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1380" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2023-1380" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26545" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-26545" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-28466" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30456" cvss3="6.0/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" id="CVE-2023-30456" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32233" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-32233" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="bpftool" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="bpftool" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kernel" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-14.1.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-core" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-core" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-core" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-core" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-devel" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-devel" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-devel" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-devel" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-headers" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-headers" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules-extra" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules-extra" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="perf" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="perf" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="python3-perf" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-14.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="python3-perf" version="5.10.134" release="14.1.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-14.1.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2023:0445</id>
  <title>ANSA-2023:0445: ANSA: kernel security and bug fix update: kernel-5.10.134-15 (Important)</title>
  <issued date="2023-07-28"/>
  <updated date="2023-07-28 14:41:03" timestamp="1690526463"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>ANSA: kernel security and bug fix update: kernel-5.10.134-15</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports

CVE-2021-33061:
Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access.

CVE-2021-3759:
A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.

CVE-2022-3606:
A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf/libbpf.c of the component BPF. The manipulation leads to null pointer dereference. It is recommended to apply a patch to fix this issue. The identifier VDB-211749 was assigned to this vulnerability.

CVE-2022-36280:
An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

CVE-2022-3707:
A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash the system.

CVE-2022-39188:
An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs.

CVE-2022-4095:
A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges.

CVE-2022-41849:
drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open(), aka a race condition between ufx_ops_open and ufx_usb_disconnect.

CVE-2022-42432:
This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the nft_osf_eval function. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel. Was ZDI-CAN-18540.

CVE-2022-4379:
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conduct a remote denial

CVE-2022-4382:
A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.

CVE-2022-4662:
A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.

CVE-2022-4744:
A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2022-47521:
An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames.

CVE-2022-47929:
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdisc_graft in net/sched/sch_api.c.

CVE-2023-0045:
The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __speculation_ctrl_update, but the IBPB is only issued on the next schedule, when the TIF bits are checked. This leaves the victim vulnerable to values already injected on the BTB, prior to the prctl syscall. The patch that added the support for the conditional mitigation via prctl (ib_prctl_set) dates back to the kernel 4.9.176. We recommend upgrading past commit a664ec9158eeddd75121d39c9a0758016097fa96

CVE-2023-0386:
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

CVE-2023-0458:
A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11

CVE-2023-0459:
Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47

CVE-2023-0461:
There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege. There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock. When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable. The setsockopt TCP_ULP operation does not require any privilege. We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c

CVE-2023-0590:
A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected.

CVE-2023-0597:
A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data. A local user could use this flaw to get access to some important data with expected location in memory.

CVE-2023-1073:
A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2023-1074:
A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networking service and someone connects to this service. This could allow a local user to starve resources, causing a denial of service.

CVE-2023-1075:
A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field that overlaps with rec-&gt;tx_ready.

CVE-2023-1076:
A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.

CVE-2023-1077:
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.

CVE-2023-1078:
A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.

CVE-2023-1095:
In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.

CVE-2023-1118:
A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CVE-2023-1281:
Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2.

CVE-2023-1380:
A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info-&gt;req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.

CVE-2023-1382:
A data race flaw was found in the Linux kernel, between where con is allocated and con-&gt;sock is set. This issue leads to a NULL pointer dereference when accessing con-&gt;sock-&gt;sk in net/tipc/topsrv.c in the tipc protocol in the Linux kernel.

CVE-2023-1611:
A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea

CVE-2023-1670:
A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CVE-2023-1829:
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28.

CVE-2023-1855:
A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.

CVE-2023-1859:
A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak.

CVE-2023-1989:
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.

CVE-2023-1990:
A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.

CVE-2023-2002:
A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.

CVE-2023-20928:
In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel

CVE-2023-20938:
In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257685302References: Upstream kernel

CVE-2023-2124:
An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2023-2162:
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.

CVE-2023-2177:
A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service.

CVE-2023-2194:
An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data-&gt;block[0]" variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution.

CVE-2023-2269:
A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.

CVE-2023-22995:
In the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls.

CVE-2023-23000:
In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error case, but an error pointer is used.

CVE-2023-23004:
In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

CVE-2023-2483:
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-33203. Reason: This candidate is a reservation duplicate of CVE-2023-33203. Notes: All CVE users should reference CVE-2023-33203 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2023-25012:
The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.

CVE-2023-26545:
In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new location) during the renaming of a device.

CVE-2023-26607:
In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.

CVE-2023-28327:
A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service.

CVE-2023-28466:
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).

CVE-2023-2985:
A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service problem.

CVE-2023-30456:
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.

CVE-2023-30772:
The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.

CVE-2023-3117:
A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.

CVE-2023-31248:
Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace

CVE-2023-3220:
An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.

CVE-2023-32233:
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

CVE-2023-32269:
An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability.

CVE-2023-3268:
An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.

CVE-2023-33288:
An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition.

CVE-2023-35001:
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

CVE-2023-35788:
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.

CVE-2023-35825:
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3141. Reason: This candidate is a reservation duplicate of CVE-2023-3141. Notes: All CVE users should reference CVE-2023-3141 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2023-0445.xml" id="ANSA-2023:0445" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33061" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2021-33061" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3759" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2021-3759" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3606" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3606" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36280" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-36280" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3707" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3707" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39188" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-39188" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4095" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H" id="CVE-2022-4095" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41849" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-41849" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42432" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L" id="CVE-2022-42432" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4379" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-4379" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4382" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-4382" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4662" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-4662" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-4744" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47521" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-47521" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47929" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" id="CVE-2022-47929" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0045" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-0045" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0386" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0386" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0458" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-0458" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0459" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0459" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0461" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0461" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0590" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0590" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0597" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0597" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1073" cvss3="6.6/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1073" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1074" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1074" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1075" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" id="CVE-2023-1075" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1076" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" id="CVE-2023-1076" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1077" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1077" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1078" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1078" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1095" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1095" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1118" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1118" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1281" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1380" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2023-1380" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1382" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1382" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1611" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1670" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1670" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1829" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1855" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1855" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1859" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1859" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1989" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1989" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1990" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1990" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" id="CVE-2023-2002" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20928" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-20928" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20938" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-20938" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2124" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-2124" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2162" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" id="CVE-2023-2162" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2177" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-2177" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2194" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-2194" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2269" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-2269" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22995" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-22995" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23000" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-23000" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23004" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-23004" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2483" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-2483" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25012" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-25012" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26545" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-26545" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26607" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2023-26607" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-28327" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-28466" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2985" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-2985" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30456" cvss3="6.0/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" id="CVE-2023-30456" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30772" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-30772" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3117" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3117" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31248" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-31248" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3220" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-3220" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32233" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-32233" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32269" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-32269" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3268" cvss3="6.0/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" id="CVE-2023-3268" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33288" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-33288" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35001" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35001" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35788" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35825" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35825" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="bpftool" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="bpftool" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kernel" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-15.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-core" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-core" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-core" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-core" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-devel" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-devel" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-devel" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-devel" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-headers" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-headers" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules-extra" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules-extra" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="perf" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="perf" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="python3-perf" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-15.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="python3-perf" version="5.10.134" release="15.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-15.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2023:0524</id>
  <title>ANSA-2023:0524: ANSA: kernel bugfix update: kernel-5.10.134-15.2 (Important)</title>
  <issued date="2023-09-15"/>
  <updated date="2023-09-15 14:04:19" timestamp="1694757859"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>ANSA: kernel bugfix update: kernel-5.10.134-15.2</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports

CVE-2022-3108:
An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().

CVE-2023-2006:
A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.

CVE-2023-2156:
A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.

CVE-2023-3090:
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb-&gt;cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled. We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.

CVE-2023-31084:
An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&amp;fepriv-&gt;sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&amp;fepriv-&gt;sem) may block the process.

CVE-2023-3111:
A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag().

CVE-2023-3117:
A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.

CVE-2023-3161:
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font-&gt;width and font-&gt;height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.

CVE-2023-3212:
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

CVE-2023-35823:
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.

CVE-2023-35824:
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.

CVE-2023-35828:
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.

CVE-2023-35829:
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.

CVE-2023-3609:
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

CVE-2023-3610:
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered. We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.

CVE-2023-3611:
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.

CVE-2023-3773:
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.

CVE-2023-3776:
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.

CVE-2023-3812:
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2023-4004:
A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.

CVE-2023-4128:
A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel. This flaw allows a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue.

CVE-2023-4147:
A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2023-0524.xml" id="ANSA-2023:0524" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3108" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3108" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2006" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" id="CVE-2023-2006" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-2156" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3090" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31084" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-31084" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3111" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3111" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3117" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3117" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3161" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-3161" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3212" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-3212" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35823" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35823" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35824" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35824" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35828" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35828" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35829" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35829" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3609" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3609" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3610" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3611" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3611" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3773" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-3773" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3776" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3776" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3812" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3812" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4004" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4004" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4128" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4147" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="bpftool" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="bpftool" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kernel" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-15.2.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-core" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-core" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-core" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-core" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-devel" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-devel" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-devel" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-devel" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-headers" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-headers" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules-extra" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules-extra" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="perf" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="perf" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="python3-perf" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-15.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="python3-perf" version="5.10.134" release="15.2.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-15.2.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2023:0691</id>
  <title>ANSA-2023:0691: kernel security and bug fix update: kernel-5.10.134-16 (Important)</title>
  <issued date="2023-11-16"/>
  <updated date="2023-11-16 17:01:45" timestamp="1700125305"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>kernel security and bug fix update: kernel-5.10.134-16</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports

CVE-2022-3108:
An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().

CVE-2022-3114:
An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() and will cause the null pointer dereference.

CVE-2022-3424:
A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2022-36280:
An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

CVE-2022-3903:
An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system.

CVE-2022-39188:
An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs.

CVE-2022-41850:
roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report-&gt;value is in progress.

CVE-2022-42432:
This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the nft_osf_eval function. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel. Was ZDI-CAN-18540.

CVE-2022-4379:
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conduct a remote denial

CVE-2022-4382:
A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.

CVE-2022-45887:
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call.

CVE-2023-0045:
The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __speculation_ctrl_update, but the IBPB is only issued on the next schedule, when the TIF bits are checked. This leaves the victim vulnerable to values already injected on the BTB, prior to the prctl syscall. The patch that added the support for the conditional mitigation via prctl (ib_prctl_set) dates back to the kernel 4.9.176. We recommend upgrading past commit a664ec9158eeddd75121d39c9a0758016097fa96

CVE-2023-0160:
A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the system.

CVE-2023-0458:
A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11

CVE-2023-0459:
Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47

CVE-2023-0615:
A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOC_S_DV_TIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled.

CVE-2023-1078:
A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.

CVE-2023-1206:
A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

CVE-2023-1382:
A data race flaw was found in the Linux kernel, between where con is allocated and con-&gt;sock is set. This issue leads to a NULL pointer dereference when accessing con-&gt;sock-&gt;sk in net/tipc/topsrv.c in the tipc protocol in the Linux kernel.

CVE-2023-1670:
A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CVE-2023-1829:
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28.

CVE-2023-1855:
A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.

CVE-2023-1859:
A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak.

CVE-2023-1989:
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.

CVE-2023-1990:
A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.

CVE-2023-2002:
A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.

CVE-2023-2006:
A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.

CVE-2023-20569:
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

CVE-2023-20593:
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

CVE-2023-2124:
An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2023-2156:
A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.

CVE-2023-2162:
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.

CVE-2023-2177:
A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service.

CVE-2023-2194:
An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data-&gt;block[0]" variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution.

CVE-2023-22995:
In the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls.

CVE-2023-2483:
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-33203. Reason: This candidate is a reservation duplicate of CVE-2023-33203. Notes: All CVE users should reference CVE-2023-33203 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2023-26607:
In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.

CVE-2023-28327:
A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service.

CVE-2023-2860:
An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a privileged local user to disclose sensitive information on affected installations of the Linux kernel.

CVE-2023-2985:
A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service problem.

CVE-2023-3006:
A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted branches within the victim's hardware context. Once that occurs, speculation caused by the mispredicted branches can cause cache allocation. This issue leads to obtaining information that should not be accessible.

CVE-2023-30772:
The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.

CVE-2023-3090:
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb-&gt;cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled. We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.

CVE-2023-31083:
An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu-&gt;proto is set. A NULL pointer dereference may occur.

CVE-2023-31084:
An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&amp;fepriv-&gt;sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&amp;fepriv-&gt;sem) may block the process.

CVE-2023-31085:
An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd-&gt;erasesize), used indirectly by ctrl_cdev_ioctl, when mtd-&gt;erasesize is 0.

CVE-2023-3111:
A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag().

CVE-2023-3117:
A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.

CVE-2023-31248:
Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace

CVE-2023-31436:
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.

CVE-2023-3161:
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font-&gt;width and font-&gt;height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.

CVE-2023-3212:
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

CVE-2023-3220:
An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.

CVE-2023-32269:
An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability.

CVE-2023-3268:
An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.

CVE-2023-33288:
An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition.

CVE-2023-3358:
A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.

CVE-2023-20928:
In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel

CVE-2023-20938:
In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257685302References: Upstream kernel

CVE-2023-35001:
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

CVE-2023-3567:
A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

CVE-2023-35788:
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.

CVE-2023-35823:
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.

CVE-2023-35824:
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.

CVE-2023-35825:
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3141. Reason: This candidate is a reservation duplicate of CVE-2023-3141. Notes: All CVE users should reference CVE-2023-3141 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2023-35828:
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.

CVE-2023-35829:
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.

CVE-2023-3609:
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

CVE-2023-3610:
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered. We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.

CVE-2023-3611:
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.

CVE-2023-3772:
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.

CVE-2023-3773:
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.

CVE-2023-3776:
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.

CVE-2023-3812:
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2023-3863:
A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.

CVE-2023-4004:
A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.

CVE-2023-4015:
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used. We recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2.

CVE-2023-40283:
An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.

CVE-2023-4128:
** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

CVE-2023-4132:
A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.

CVE-2023-4147:
A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.

CVE-2023-4155:
A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the `VMGEXIT` handler recursively. If an attacker manages to call the handler multiple times, they can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (`CONFIG_VMAP_STACK`).

CVE-2023-42753:
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h-&gt;nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

CVE-2023-42754:
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.

CVE-2023-42755:
A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service.

CVE-2023-4563:
A use-after-free flaw was found in the nftables sub-component due to a race problem between the set GC and transaction in the Linux Kernel. This flaw allows a local attacker to crash the system due to a missing call to `nft_set_elem_mark_busy`, causing double deactivation of the element and possibly leading to a kernel information leak problem.

CVE-2023-4623:
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free. We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.

CVE-2023-4921:
A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue(). We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2023-0691.xml" id="ANSA-2023:0691" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3108" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3108" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3114" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3114" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3424" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3424" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36280" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-36280" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3903" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3903" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39188" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-39188" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41850" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-41850" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42432" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L" id="CVE-2022-42432" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4379" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-4379" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4382" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-4382" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45887" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-45887" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0045" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-0045" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-0160" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0458" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-0458" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0459" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-0459" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0615" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-0615" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1078" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1078" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1206" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1206" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1382" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1382" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1670" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1670" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1829" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1855" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1855" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1859" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1859" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1989" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-1989" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1990" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1990" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" id="CVE-2023-2002" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2006" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" id="CVE-2023-2006" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20569" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" id="CVE-2023-20569" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" id="CVE-2023-20593" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2124" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-2124" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-2156" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2162" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" id="CVE-2023-2162" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2177" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-2177" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2194" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-2194" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22995" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-22995" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2483" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-2483" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26607" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2023-26607" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-28327" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2860" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-2860" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2985" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-2985" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3006" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-3006" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30772" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-30772" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3090" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31083" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-31083" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31084" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-31084" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31085" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-31085" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3111" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3111" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3117" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3117" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31248" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-31248" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31436" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-31436" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3161" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-3161" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3212" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-3212" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3220" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-3220" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32269" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-32269" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3268" cvss3="6.0/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" id="CVE-2023-3268" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33288" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-33288" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3358" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-3358" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20928" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-20928" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20938" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-20938" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35001" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35001" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3567" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2023-3567" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35788" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35823" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35823" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35824" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35824" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35825" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35825" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35828" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35828" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35829" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-35829" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3609" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3609" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3610" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3611" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3611" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-3772" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3773" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-3773" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3776" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3776" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3812" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3812" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3863" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4004" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4004" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4015" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4015" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40283" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-40283" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4128" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4132" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-4132" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4147" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4155" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" id="CVE-2023-4155" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42753" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-42753" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42754" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-42754" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42755" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" id="CVE-2023-42755" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4563" cvss3="0.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N" id="CVE-2023-4563" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4623" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4921" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="" name="bpftool" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="bpftool" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="" name="kernel" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-core" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-core" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-core" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-core" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-devel" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-devel" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-debug-modules-extra" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-devel" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-devel" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-headers" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-headers" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-modules-extra" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-modules-extra" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="kernel-tools-libs-devel" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="perf" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="perf" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="" name="python3-perf" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="" name="python3-perf" version="5.10.134" release="16.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2024:0112</id>
  <title>ANSA-2024:0112: kernel security and bug fix update: kernel-5.10.134-16.3 (Important)</title>
  <issued date="2024-03-27"/>
  <updated date="2024-03-27 15:36:56" timestamp="1711525016"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>kernel security and bug fix update: kernel-5.10.134-16.3</summary>
  <description>Package updates are available for Anolis 8 that fix the following vulnerabilities:

CVE-2023-20588:
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. 

CVE-2023-28464:
hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation.

CVE-2023-39192:
A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.

CVE-2023-45863:
An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.

CVE-2023-45871:
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.

CVE-2023-4622:
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.

CVE-2023-51779:
bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition.

CVE-2023-5178:
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.

CVE-2023-52438:
In the Linux kernel, the following vulnerability has been resolved:
binder: fix use-after-free in shinker's callback
The mmap read lock is used during the shrinker's callback, which means
that using alloc-&gt;vma pointer isn't safe as it can race with munmap().
As of commit dd2283f2605e ("mm: mmap: zap pages with read mmap_sem in
munmap") the mmap lock is downgraded after the vma has been isolated.
I was able to reproduce this issue by manually adding some delays and
triggering page reclaiming through the shrinker's debug sysfs. The
following KASAN report confirms the UAF:
==================================================================
BUG: KASAN: slab-use-after-free in zap_page_range_single+0x470/0x4b8
Read of size 8 at addr ffff356ed50e50f0 by task bash/478
CPU: 1 PID: 478 Comm: bash Not tainted 6.6.0-rc5-00055-g1c8b86a3799f-dirty #70
Hardware name: linux,dummy-virt (DT)
Call trace:
zap_page_range_single+0x470/0x4b8
binder_alloc_free_page+0x608/0xadc
__list_lru_walk_one+0x130/0x3b0
list_lru_walk_node+0xc4/0x22c
binder_shrink_scan+0x108/0x1dc
shrinker_debugfs_scan_write+0x2b4/0x500
full_proxy_write+0xd4/0x140
vfs_write+0x1ac/0x758
ksys_write+0xf0/0x1dc
__arm64_sys_write+0x6c/0x9c
Allocated by task 492:
kmem_cache_alloc+0x130/0x368
vm_area_alloc+0x2c/0x190
mmap_region+0x258/0x18bc
do_mmap+0x694/0xa60
vm_mmap_pgoff+0x170/0x29c
ksys_mmap_pgoff+0x290/0x3a0
__arm64_sys_mmap+0xcc/0x144
Freed by task 491:
kmem_cache_free+0x17c/0x3c8
vm_area_free_rcu_cb+0x74/0x98
rcu_core+0xa38/0x26d4
rcu_core_si+0x10/0x1c
__do_softirq+0x2fc/0xd24
Last potentially related work creation:
__call_rcu_common.constprop.0+0x6c/0xba0
call_rcu+0x10/0x1c
vm_area_free+0x18/0x24
remove_vma+0xe4/0x118
do_vmi_align_munmap.isra.0+0x718/0xb5c
do_vmi_munmap+0xdc/0x1fc
__vm_munmap+0x10c/0x278
__arm64_sys_munmap+0x58/0x7c
Fix this issue by performing instead a vma_lookup() which will fail to
find the vma that was isolated before the mmap lock downgrade. Note that
this option has better performance than upgrading to a mmap write lock
which would increase contention. Plus, mmap_write_trylock() has been
recently removed anyway.

CVE-2023-5717:
A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.
If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer.
We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.

CVE-2023-6176:
A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.

CVE-2023-6931:
A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.
A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().
We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.

CVE-2023-6932:
A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation.
A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread.
We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.

CVE-2024-1086:
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.
We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.

CVE-2024-22099:
NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C.
This issue affects Linux kernel: v2.6.12-rc2.

CVE-2024-24855:
A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

CVE-2024-24860:
A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

CVE-2024-26597:
In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix global oob in rmnet_policy The variable rmnet_link_ops assign a *bigger* maxtype which leads to a global out-of-bounds read when parsing the netlink attributes. See bug trace below:
==================================================================
BUG: KASAN: global-out-of-bounds in validate_nla lib/nlattr.c:386 [inline]
BUG: KASAN: global-out-of-bounds in __nla_validate_parse+0x24af/0x2750 lib/nlattr.c:600 Read of size 1 at addr ffffffff92c438d0 by task syz-executor.6/84207 CPU: 0 PID: 84207 Comm: syz-executor.6 Tainted: G N 6.1.0 #3 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:284 [inline] print_report+0x172/0x475 mm/kasan/report.c:395 kasan_report+0xbb/0x1c0 mm/kasan/report.c:495 validate_nla lib/nlattr.c:386 [inline] __nla_validate_parse+0x24af/0x2750 lib/nlattr.c:600 __nla_parse+0x3e/0x50 lib/nlattr.c:697 nla_parse_nested_deprecated include/net/netlink.h:1248 [inline] __rtnl_newlink+0x50a/0x1880 net/core/rtnetlink.c:3485 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3594 rtnetlink_rcv_msg+0x43c/0xd70 net/core/rtnetlink.c:6091 netlink_rcv_skb+0x14f/0x410 net/netlink/af_netlink.c:2540 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x930/0xe50 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg+0x154/0x190 net/socket.c:734 ____sys_sendmsg+0x6df/0x840 net/socket.c:2482 ___sys_sendmsg+0x110/0x1b0 net/socket.c:2536 __sys_sendmsg+0xf3/0x1c0 net/socket.c:2565 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fdcf2072359 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fdcf13e3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fdcf219ff80 RCX: 00007fdcf2072359 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 RBP: 00007fdcf20bd493 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffbb8d7bdf R14: 00007fdcf13e3300 R15: 0000000000022000 </TASK> The buggy address belongs to the variable: rmnet_policy+0x30/0xe0 The buggy address belongs to the physical page: page:0000000065bdeb3c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x155243 flags: 0x200000000001000(reserved|node=0|zone=2) raw: 0200000000001000 ffffea00055490c8 ffffea00055490c8 0000000000000000 raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffffffff92c43780: f9 f9 f9 f9 00 00 00 02 f9 f9 f9 f9 00 00 00 07 ffffffff92c43800: f9 f9 f9 f9 00 00 00 05 f9 f9 f9 f9 06 f9 f9 f9 >ffffffff92c43880: f9 f9 f9 f9 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 ^ ffffffff92c43900: 00 00 00 00 00 00 00 00 07 f9 f9 f9 f9 f9 f9 f9 ffffffff92c43980: 00 00 00 07 f9 f9 f9 f9 00 00 00 05 f9 f9 f9 f9 According to the comment of `nla_parse_nested_deprecated`, the maxtype should be len(destination array) - 1. Hence use `IFLA_RMNET_MAX` here.
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2024-0112.xml" id="ANSA-2024:0112" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" cvss3="6.0/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" id="CVE-2023-20588" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-28464" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39192" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L" id="CVE-2023-39192" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45863" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-45863" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45871" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-45871" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4622" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" id="CVE-2023-4622" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51779" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-51779" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5178" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-5178" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52438" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-52438" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5717" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-5717" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6176" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-6176" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6931" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-6931" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6932" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-6932" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1086" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2024-1086" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-22099" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24855" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-24855" type="cve"/>
	<reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24860" cvss3="5.3/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-24860" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26597" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2024-26597" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.8">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="0" name="bpftool" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="bpftool" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="0" name="kernel" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.3.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-core" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-core" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-core" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-core" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-devel" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-devel" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-headers" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-headers" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="perf" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="perf" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="python3-perf" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="python3-perf" version="5.10.134" release="16.3.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.3.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="enhancement" version="1.0">
  <id>ANEA-2024:0415</id>
  <title>ANEA-2024:0415: ANEA: qatengine: enable qat_sw for AMD platform (Enhancement)</title>
  <issued date="2024-05-28"/>
  <updated date="2024-05-28 16:54:19" timestamp="1716886459"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Enhancement</severity>
  <summary>ANEA: qatengine: enable qat_sw for AMD platform</summary>
  <description>enable qat_sw for AMD platform.
  </description>
  <pkglist>
    <collection short="anolis8.9">
    <name>Anolis 8</name>
      <package arch="src" epoch="0" name="qatengine" version="1.2.0" release="2.an8" repo="kernel-5.10" src="">
        <filename>qatengine-1.2.0-2.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="qatengine" version="1.2.0" release="2.an8" repo="kernel-5.10" src="">
        <filename>qatengine-1.2.0-2.an8.x86_64.rpm</filename>
      </package>
      <package arch="noarch" epoch="0" name="qatengine-doc" version="1.2.0" release="2.an8" repo="kernel-5.10" src="">
        <filename>qatengine-doc-1.2.0-2.an8.noarch.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2024:0553</id>
  <title>ANSA-2024:0553: ANSA: kernel security and bug fix update: kernel-5.10.134-17 (Important)</title>
  <issued date="2024-07-01"/>
  <updated date="2024-07-01 13:49:12" timestamp="1719812952"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>ANSA: kernel security and bug fix update: kernel-5.10.134-17</summary>
  <description>Package updates are available for Anolis 8 that fix the following vulnerabilities:

CVE-2022-3114:
An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() and will cause the null pointer dereference.

CVE-2022-3424:
A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2022-38096:
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

CVE-2022-3903:
An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system.

CVE-2022-45887:
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call.

CVE-2023-0160:
A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the system.

CVE-2023-0615:
A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOC_S_DV_TIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled.

CVE-2023-1206:
A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

CVE-2023-20569:
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

CVE-2023-20588:
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. 

CVE-2023-20593:
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

CVE-2023-28464:
hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation.

CVE-2023-2860:
An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a privileged local user to disclose sensitive information on affected installations of the Linux kernel.

CVE-2023-3006:
A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted branches within the victim's hardware context. Once that occurs, speculation caused by the mispredicted branches can cause cache allocation. This issue leads to obtaining information that should not be accessible.

CVE-2023-31083:
An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu-&gt;proto is set. A NULL pointer dereference may occur.

CVE-2023-31085:
An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd-&gt;erasesize), used indirectly by ctrl_cdev_ioctl, when mtd-&gt;erasesize is 0.

CVE-2023-3358:
A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.

CVE-2023-3567:
A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

CVE-2023-3772:
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.

CVE-2023-3863:
A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.

CVE-2023-39192:
A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.

CVE-2023-4015:
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used.
We recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2.

CVE-2023-4132:
A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.

CVE-2023-4155:
A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the `VMGEXIT` handler recursively. If an attacker manages to call the handler multiple times, they can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (`CONFIG_VMAP_STACK`).

CVE-2023-42753:
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h-&gt;nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

CVE-2023-42754:
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.

CVE-2023-42755:
A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service.

CVE-2023-45863:
An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.

CVE-2023-45871:
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.

CVE-2023-4622:
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.

CVE-2023-4623:
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.

CVE-2023-4921:
A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue().
We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.

CVE-2023-51042:
In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.

CVE-2023-51779:
bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition.

CVE-2023-5178:
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.

CVE-2023-52438:
In the Linux kernel, the following vulnerability has been resolved:
binder: fix use-after-free in shinker's callback
The mmap read lock is used during the shrinker's callback, which means
that using alloc-&gt;vma pointer isn't safe as it can race with munmap().
As of commit dd2283f2605e ("mm: mmap: zap pages with read mmap_sem in
munmap") the mmap lock is downgraded after the vma has been isolated.
I was able to reproduce this issue by manually adding some delays and
triggering page reclaiming through the shrinker's debug sysfs. The
following KASAN report confirms the UAF:
==================================================================
BUG: KASAN: slab-use-after-free in zap_page_range_single+0x470/0x4b8
Read of size 8 at addr ffff356ed50e50f0 by task bash/478
CPU: 1 PID: 478 Comm: bash Not tainted 6.6.0-rc5-00055-g1c8b86a3799f-dirty #70
Hardware name: linux,dummy-virt (DT)
Call trace:
zap_page_range_single+0x470/0x4b8
binder_alloc_free_page+0x608/0xadc
__list_lru_walk_one+0x130/0x3b0
list_lru_walk_node+0xc4/0x22c
binder_shrink_scan+0x108/0x1dc
shrinker_debugfs_scan_write+0x2b4/0x500
full_proxy_write+0xd4/0x140
vfs_write+0x1ac/0x758
ksys_write+0xf0/0x1dc
__arm64_sys_write+0x6c/0x9c
Allocated by task 492:
kmem_cache_alloc+0x130/0x368
vm_area_alloc+0x2c/0x190
mmap_region+0x258/0x18bc
do_mmap+0x694/0xa60
vm_mmap_pgoff+0x170/0x29c
ksys_mmap_pgoff+0x290/0x3a0
__arm64_sys_mmap+0xcc/0x144
Freed by task 491:
kmem_cache_free+0x17c/0x3c8
vm_area_free_rcu_cb+0x74/0x98
rcu_core+0xa38/0x26d4
rcu_core_si+0x10/0x1c
__do_softirq+0x2fc/0xd24
Last potentially related work creation:
__call_rcu_common.constprop.0+0x6c/0xba0
call_rcu+0x10/0x1c
vm_area_free+0x18/0x24
remove_vma+0xe4/0x118
do_vmi_align_munmap.isra.0+0x718/0xb5c
do_vmi_munmap+0xdc/0x1fc
__vm_munmap+0x10c/0x278
__arm64_sys_munmap+0x58/0x7c
Fix this issue by performing instead a vma_lookup() which will fail to
find the vma that was isolated before the mmap lock downgrade. Note that
this option has better performance than upgrading to a mmap write lock
which would increase contention. Plus, mmap_write_trylock() has been
recently removed anyway.

CVE-2023-52445:
In the Linux kernel, the following vulnerability has been resolved:
media: pvrusb2: fix use after free on context disconnection
Upon module load, a kthread is created targeting the
pvr2_context_thread_func function, which may call pvr2_context_destroy
and thus call kfree() on the context object. However, that might happen
before the usb hub_event handler is able to notify the driver. This
patch adds a sanity check before the invalid read reported by syzbot,
within the context disconnection call stack.

CVE-2023-5717:
A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.
If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer.
We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.

CVE-2023-6176:
A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.

CVE-2023-6546:
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

CVE-2023-6817:
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.
We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.

CVE-2023-6915:
A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.

CVE-2023-6931:
A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.
A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().
We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.

CVE-2023-6932:
A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation.
A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread.
We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.

CVE-2024-0565:
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.

CVE-2024-0646:
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVE-2024-1086:
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.
We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.

CVE-2024-22099:
NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C.
This issue affects Linux kernel: v2.6.12-rc2.

CVE-2024-23307:
Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.

CVE-2024-24855:
A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

CVE-2024-24860:
A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

CVE-2024-26589:
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
For PTR_TO_FLOW_KEYS, check_flow_keys_access() only uses fixed off
for validation. However, variable offset ptr alu is not prohibited
for this ptr kind. So the variable offset is not checked.
The following prog is accepted:
func#0 @0
0: R1=ctx() R10=fp0
0: (bf) r6 = r1                       ; R1=ctx() R6_w=ctx()
1: (79) r7 = *(u64 *)(r6 +144)        ; R6_w=ctx() R7_w=flow_keys()
2: (b7) r8 = 1024                     ; R8_w=1024
3: (37) r8 /= 1                       ; R8_w=scalar()
4: (57) r8 &amp;= 1024                    ; R8_w=scalar(smin=smin32=0,
smax=umax=smax32=umax32=1024,var_off=(0x0; 0x400))
5: (0f) r7 += r8
mark_precise: frame0: last_idx 5 first_idx 0 subseq_idx -1
mark_precise: frame0: regs=r8 stack= before 4: (57) r8 &amp;= 1024
mark_precise: frame0: regs=r8 stack= before 3: (37) r8 /= 1
mark_precise: frame0: regs=r8 stack= before 2: (b7) r8 = 1024
6: R7_w=flow_keys(smin=smin32=0,smax=umax=smax32=umax32=1024,var_off
=(0x0; 0x400)) R8_w=scalar(smin=smin32=0,smax=umax=smax32=umax32=1024,
var_off=(0x0; 0x400))
6: (79) r0 = *(u64 *)(r7 +0)          ; R0_w=scalar()
7: (95) exit
This prog loads flow_keys to r7, and adds the variable offset r8
to r7, and finally causes out-of-bounds access:
BUG: unable to handle page fault for address: ffffc90014c80038
[...]
Call Trace:
&lt;TASK&gt;
bpf_dispatcher_nop_func include/linux/bpf.h:1231 [inline]
__bpf_prog_run include/linux/filter.h:651 [inline]
bpf_prog_run include/linux/filter.h:658 [inline]
bpf_prog_run_pin_on_cpu include/linux/filter.h:675 [inline]
bpf_flow_dissect+0x15f/0x350 net/core/flow_dissector.c:991
bpf_prog_test_run_flow_dissector+0x39d/0x620 net/bpf/test_run.c:1359
bpf_prog_test_run kernel/bpf/syscall.c:4107 [inline]
__sys_bpf+0xf8f/0x4560 kernel/bpf/syscall.c:5475
__do_sys_bpf kernel/bpf/syscall.c:5561 [inline]
__se_sys_bpf kernel/bpf/syscall.c:5559 [inline]
__x64_sys_bpf+0x73/0xb0 kernel/bpf/syscall.c:5559
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x63/0x6b
Fix this by rejecting ptr alu with variable offset on flow_keys.
Applying the patch rejects the program with "R7 pointer arithmetic
on flow_keys prohibited".

CVE-2024-26597:
linux内核的rmnet存在全局变量越界读，影响版本4.17-rc1&lt;=版本&lt;6.8-rc1，包含4.19和5.10
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2024-0553.xml" id="ANSA-2024:0553" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3114" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3114" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3424" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2022-3424" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38096" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-38096" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3903" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-3903" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45887" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2022-45887" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-0160" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0615" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-0615" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1206" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-1206" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20569" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" id="CVE-2023-20569" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" cvss3="6.0/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" id="CVE-2023-20588" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" id="CVE-2023-20593" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-28464" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2860" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-2860" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3006" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2023-3006" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31083" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-31083" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31085" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-31085" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3358" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-3358" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3567" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2023-3567" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-3772" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-3863" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39192" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L" id="CVE-2023-39192" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4015" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4015" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4132" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-4132" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4155" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" id="CVE-2023-4155" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42753" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-42753" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42754" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-42754" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42755" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" id="CVE-2023-42755" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45863" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-45863" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45871" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-45871" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4622" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" id="CVE-2023-4622" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4623" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-4921" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51042" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-51042" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51779" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-51779" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5178" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-5178" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52438" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-52438" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52445" cvss3="3.0/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L" id="CVE-2023-52445" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5717" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-5717" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6176" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-6176" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6546" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-6546" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6817" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-6817" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6915" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2023-6915" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6931" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-6931" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6932" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-6932" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0565" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" id="CVE-2024-0565" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0646" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2024-0646" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1086" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2024-1086" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-22099" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-23307" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24855" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-24855" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24860" cvss3="5.3/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-24860" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26589" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-26589" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26597" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-26597" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.9">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="0" name="bpftool" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="bpftool" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="0" name="kernel" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-core" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-core" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-core" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-core" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-devel" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-devel" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-headers" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-headers" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="perf" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="perf" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="python3-perf" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-17.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="python3-perf" version="5.10.134" release="17.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-17.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2024:0585</id>
  <title>ANBA-2024:0585: ANBA: kernel bug fix update: kernel-5.10.134-17.1 (Bug Fix)</title>
  <issued date="2024-07-11"/>
  <updated date="2024-07-11 09:50:44" timestamp="1720662644"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>ANBA: kernel bug fix update: kernel-5.10.134-17.1</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports
  </description>
  <pkglist>
    <collection short="anolis8.9">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="0" name="bpftool" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="bpftool" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="0" name="kernel" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.1.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-core" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-core" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-core" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-core" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-devel" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-devel" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-headers" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-headers" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="perf" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="perf" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="python3-perf" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-17.1.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="python3-perf" version="5.10.134" release="17.1.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-17.1.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2024:0734</id>
  <title>ANBA-2024:0734: ANBA: kernel bug fix update: kernel-5.10.134-16.4 (Bug Fix)</title>
  <issued date="2024-07-24"/>
  <updated date="2024-07-24 16:50:14" timestamp="1721811014"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>ANBA: kernel bug fix update: kernel-5.10.134-16.4</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports
  </description>
  <pkglist>
    <collection short="anolis8.9">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="0" name="bpftool" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="bpftool" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="0" name="kernel" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.4.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-core" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-core" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-core" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-core" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-devel" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-devel" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-headers" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-headers" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="perf" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="perf" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="python3-perf" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.4.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="python3-perf" version="5.10.134" release="16.4.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.4.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2024:0793</id>
  <title>ANBA-2024:0793: ANBA: kernel bug fix update: kernel-5.10.134-17.2 (Bug Fix)</title>
  <issued date="2024-08-13"/>
  <updated date="2024-08-13 11:07:23" timestamp="1723518443"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>ANBA: kernel bug fix update: kernel-5.10.134-17.2</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports
  </description>
  <pkglist>
    <collection short="anolis8.9">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="0" name="bpftool" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="bpftool" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="0" name="kernel" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.2.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-core" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-core" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-core" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-core" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-devel" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-devel" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-headers" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-headers" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="perf" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="perf" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="python3-perf" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-17.2.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="python3-perf" version="5.10.134" release="17.2.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-17.2.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2024:0800</id>
  <title>ANBA-2024:0800: qatengine bug fix and enhancement update (Bug Fix)</title>
  <issued date="2024-08-13"/>
  <updated date="2024-08-13 16:34:01" timestamp="1723538041"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>qatengine bug fix and enhancement update</summary>
  <description>Package updates for bug fix.
  </description>
  <pkglist>
    <collection short="anolis8.9">
    <name>Anolis 8</name>
      <package arch="src" epoch="0" name="qatengine" version="1.2.0" release="3.an8" repo="kernel-5.10" src="">
        <filename>qatengine-1.2.0-3.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="qatengine" version="1.2.0" release="3.an8" repo="kernel-5.10" src="">
        <filename>qatengine-1.2.0-3.an8.x86_64.rpm</filename>
      </package>
      <package arch="noarch" epoch="0" name="qatengine-doc" version="1.2.0" release="3.an8" repo="kernel-5.10" src="">
        <filename>qatengine-doc-1.2.0-3.an8.noarch.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2024:0801</id>
  <title>ANBA-2024:0801: intel-ipp-crypto-mb bug fix and enhancement update (Bug Fix)</title>
  <issued date="2024-08-13"/>
  <updated date="2024-08-13 16:34:30" timestamp="1723538070"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>intel-ipp-crypto-mb bug fix and enhancement update</summary>
  <description>Package updates for bug fix.
  </description>
  <pkglist>
    <collection short="anolis8.9">
    <name>Anolis 8</name>
      <package arch="src" epoch="0" name="intel-ipp-crypto-mb" version="1.0.6" release="4.an8" repo="kernel-5.10" src="">
        <filename>intel-ipp-crypto-mb-1.0.6-4.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="intel-ipp-crypto-mb" version="1.0.6" release="4.an8" repo="kernel-5.10" src="">
        <filename>intel-ipp-crypto-mb-1.0.6-4.an8.x86_64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="intel-ipp-crypto-mb-devel" version="1.0.6" release="4.an8" repo="kernel-5.10" src="">
        <filename>intel-ipp-crypto-mb-devel-1.0.6-4.an8.x86_64.rpm</filename>
      </package>
      <package arch="noarch" epoch="0" name="intel-ipp-crypto-mb-doc" version="1.0.6" release="4.an8" repo="kernel-5.10" src="">
        <filename>intel-ipp-crypto-mb-doc-1.0.6-4.an8.noarch.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="intel-ipp-crypto-mb-static" version="1.0.6" release="4.an8" repo="kernel-5.10" src="">
        <filename>intel-ipp-crypto-mb-static-1.0.6-4.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2024:1015</id>
  <title>ANBA-2024:1015: ANBA: kernel bug fix update: kernel-5.10.134-17.3 (Bug Fix)</title>
  <issued date="2024-10-31"/>
  <updated date="2024-10-31 16:03:08" timestamp="1730361788"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>ANBA: kernel bug fix update: kernel-5.10.134-17.3</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports
  </description>
  <pkglist>
    <collection short="anolis8.9">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="0" name="bpftool" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="bpftool" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="0" name="kernel" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.3.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-core" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-core" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-core" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-core" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-internal" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-internal-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-internal" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-internal-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-devel" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-devel" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-headers" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-headers" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="perf" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="perf" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="python3-perf" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-17.3.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="python3-perf" version="5.10.134" release="17.3.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-17.3.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="bugfix" version="1.0">
  <id>ANBA-2024:1087</id>
  <title>ANBA-2024:1087: ANBA: kernel bug fix update: kernel-5.10.134-16.5 (Bug Fix)</title>
  <issued date="2024-11-18"/>
  <updated date="2024-11-18 11:12:39" timestamp="1731899559"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Bug Fix</severity>
  <summary>ANBA: kernel bug fix update: kernel-5.10.134-16.5</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports
  </description>
  <pkglist>
    <collection short="anolis8.9">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="0" name="bpftool" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="bpftool" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="0" name="kernel" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.5.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-core" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-core" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-core" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-core" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-internal" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-internal-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-internal" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-internal-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-devel" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-devel" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-headers" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-headers" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="perf" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="perf" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="python3-perf" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.5.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="python3-perf" version="5.10.134" release="16.5.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-16.5.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
<update author="os@lists.openanolis.cn" from="os@lists.openanolis.cn" status="stable" type="security" version="1.0">
  <id>ANSA-2024:1185</id>
  <title>ANSA-2024:1185: ANSA: kernel security and bug fix update: kernel-5.10.134-18 (Important)</title>
  <issued date="2024-12-16"/>
  <updated date="2024-12-16 10:37:37" timestamp="1734316657"/>
  <rights>Openanolis Community</rights>
  <release>Anolis OS</release>
  <severity>Important</severity>
  <summary>ANSA: kernel security and bug fix update: kernel-5.10.134-18</summary>
  <description>The Linux kernel, based on version 5.10.134, heavily modified with backports

CVE-2023-52478:
In the Linux kernel, the following vulnerability has been resolved:
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
hidpp_connect_event() has *four* time-of-check vs time-of-use (TOCTOU)
races when it races with itself.
hidpp_connect_event() primarily runs from a workqueue but it also runs
on probe() and if a "device-connected" packet is received by the hw
when the thread running hidpp_connect_event() from probe() is waiting on
the hw, then a second thread running hidpp_connect_event() will be
started from the workqueue.
This opens the following races (note the below code is simplified):
1. Retrieving + printing the protocol (harmless race):
if (!hidpp-&gt;protocol_major) {
hidpp_root_get_protocol_version()
hidpp-&gt;protocol_major = response.rap.params[0];
}
We can actually see this race hit in the dmesg in the abrt output
attached to rhbz#2227968:
[ 3064.624215] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected.
[ 3064.658184] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected.
Testing with extra logging added has shown that after this the 2 threads
take turn grabbing the hw access mutex (send_mutex) so they ping-pong
through all the other TOCTOU cases managing to hit all of them:
2. Updating the name to the HIDPP name (harmless race):
if (hidpp-&gt;name == hdev-&gt;name) {
...
hidpp-&gt;name = new_name;
}
3. Initializing the power_supply class for the battery (problematic!):
hidpp_initialize_battery()
{
if (hidpp-&gt;battery.ps)
return 0;
probe_battery(); /* Blocks, threads take turns executing this */
hidpp-&gt;battery.desc.properties =
devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);
hidpp-&gt;battery.ps =
devm_power_supply_register(&amp;hidpp-&gt;hid_dev-&gt;dev,
&amp;hidpp-&gt;battery.desc, cfg);
}
4. Creating delayed input_device (potentially problematic):
if (hidpp-&gt;delayed_input)
return;
hidpp-&gt;delayed_input = hidpp_allocate_input(hdev);
The really big problem here is 3. Hitting the race leads to the following
sequence:
hidpp-&gt;battery.desc.properties =
devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);
hidpp-&gt;battery.ps =
devm_power_supply_register(&amp;hidpp-&gt;hid_dev-&gt;dev,
&amp;hidpp-&gt;battery.desc, cfg);
...
hidpp-&gt;battery.desc.properties =
devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);
hidpp-&gt;battery.ps =
devm_power_supply_register(&amp;hidpp-&gt;hid_dev-&gt;dev,
&amp;hidpp-&gt;battery.desc, cfg);
So now we have registered 2 power supplies for the same battery,
which looks a bit weird from userspace's pov but this is not even
the really big problem.
Notice how:
1. This is all devm-maganaged
2. The hidpp-&gt;battery.desc struct is shared between the 2 power supplies
3. hidpp-&gt;battery.desc.properties points to the result from the second
devm_kmemdup()
This causes a use after free scenario on USB disconnect of the receiver:
1. The last registered power supply class device gets unregistered
2. The memory from the last devm_kmemdup() call gets freed,
hidpp-&gt;battery.desc.properties now points to freed memory
3. The first registered power supply class device gets unregistered,
this involves sending a remove uevent to userspace which invokes
power_supply_uevent() to fill the uevent data
4. power_supply_uevent() uses hidpp-&gt;battery.desc.properties which
now points to freed memory leading to backtraces like this one:
Sep 22 20:01:35 eric kernel: BUG: unable to handle page fault for address: ffffb2140e017f08
...
Sep 22 20:01:35 eric kernel: Workqueue: usb_hub_wq hub_event
Sep 22 20:01:35 eric kernel: RIP: 0010:power_supply_uevent+0xee/0x1d0
...
Sep 22 20:01:35 eric kernel:  ? asm_exc_page_fault+0x26/0x30
Sep 22 20:01:35 eric kernel:  ? power_supply_uevent+0xee/0x1d0
Sep 22 20:01:35 eric kernel:  ? power_supply_uevent+0x10d/0x1d0
Sep 22 20:01:35 eric kernel:  dev_uevent+0x10f/0x2d0
Sep 22 20:01:35 eric kernel:  kobject_uevent_env+0x291/0x680
Sep 22 20:01:35 eric kernel:  
---truncated---

CVE-2023-52628:
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: exthdr: fix 4-byte stack OOB write
If priv-&gt;len is a multiple of 4, then dst[len / 4] can write past
the destination array which leads to stack corruption.
This construct is necessary to clean the remainder of the register
in case -&gt;len is NOT a multiple of the register size, so make it
conditional just like nft_payload.c does.
The bug was added in 4.1 cycle and then copied/inherited when
tcp/sctp and ip option support was added.
Bug reported by Zero Day Initiative project (ZDI-CAN-21950,
ZDI-CAN-21951, ZDI-CAN-21961).

CVE-2024-36883:
In the Linux kernel, the following vulnerability has been resolved:
net: fix out-of-bounds access in ops_init
net_alloc_generic is called by net_alloc, which is called without any
locking. It reads max_gen_ptrs, which is changed under pernet_ops_rwsem. It
is read twice, first to allocate an array, then to set s.len, which is
later used to limit the bounds of the array access.
It is possible that the array is allocated and another thread is
registering a new pernet ops, increments max_gen_ptrs, which is then used
to set s.len with a larger than allocated length for the variable array.
Fix it by reading max_gen_ptrs only once in net_alloc_generic. If
max_gen_ptrs is later incremented, it will be caught in net_assign_generic.

CVE-2024-36886:
In the Linux kernel, the following vulnerability has been resolved:
tipc: fix UAF in error path
Sam Page (sam4k) working with Trend Micro Zero Day Initiative reported
a UAF in the tipc_buf_append() error path:
BUG: KASAN: slab-use-after-free in kfree_skb_list_reason+0x47e/0x4c0
linux/net/core/skbuff.c:1183
Read of size 8 at addr ffff88804d2a7c80 by task poc/8034
CPU: 1 PID: 8034 Comm: poc Not tainted 6.8.2 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
1.16.0-debian-1.16.0-5 04/01/2014
Call Trace:
&lt;IRQ&gt;
__dump_stack linux/lib/dump_stack.c:88
dump_stack_lvl+0xd9/0x1b0 linux/lib/dump_stack.c:106
print_address_description linux/mm/kasan/report.c:377
print_report+0xc4/0x620 linux/mm/kasan/report.c:488
kasan_report+0xda/0x110 linux/mm/kasan/report.c:601
kfree_skb_list_reason+0x47e/0x4c0 linux/net/core/skbuff.c:1183
skb_release_data+0x5af/0x880 linux/net/core/skbuff.c:1026
skb_release_all linux/net/core/skbuff.c:1094
__kfree_skb linux/net/core/skbuff.c:1108
kfree_skb_reason+0x12d/0x210 linux/net/core/skbuff.c:1144
kfree_skb linux/./include/linux/skbuff.h:1244
tipc_buf_append+0x425/0xb50 linux/net/tipc/msg.c:186
tipc_link_input+0x224/0x7c0 linux/net/tipc/link.c:1324
tipc_link_rcv+0x76e/0x2d70 linux/net/tipc/link.c:1824
tipc_rcv+0x45f/0x10f0 linux/net/tipc/node.c:2159
tipc_udp_recv+0x73b/0x8f0 linux/net/tipc/udp_media.c:390
udp_queue_rcv_one_skb+0xad2/0x1850 linux/net/ipv4/udp.c:2108
udp_queue_rcv_skb+0x131/0xb00 linux/net/ipv4/udp.c:2186
udp_unicast_rcv_skb+0x165/0x3b0 linux/net/ipv4/udp.c:2346
__udp4_lib_rcv+0x2594/0x3400 linux/net/ipv4/udp.c:2422
ip_protocol_deliver_rcu+0x30c/0x4e0 linux/net/ipv4/ip_input.c:205
ip_local_deliver_finish+0x2e4/0x520 linux/net/ipv4/ip_input.c:233
NF_HOOK linux/./include/linux/netfilter.h:314
NF_HOOK linux/./include/linux/netfilter.h:308
ip_local_deliver+0x18e/0x1f0 linux/net/ipv4/ip_input.c:254
dst_input linux/./include/net/dst.h:461
ip_rcv_finish linux/net/ipv4/ip_input.c:449
NF_HOOK linux/./include/linux/netfilter.h:314
NF_HOOK linux/./include/linux/netfilter.h:308
ip_rcv+0x2c5/0x5d0 linux/net/ipv4/ip_input.c:569
__netif_receive_skb_one_core+0x199/0x1e0 linux/net/core/dev.c:5534
__netif_receive_skb+0x1f/0x1c0 linux/net/core/dev.c:5648
process_backlog+0x101/0x6b0 linux/net/core/dev.c:5976
__napi_poll.constprop.0+0xba/0x550 linux/net/core/dev.c:6576
napi_poll linux/net/core/dev.c:6645
net_rx_action+0x95a/0xe90 linux/net/core/dev.c:6781
__do_softirq+0x21f/0x8e7 linux/kernel/softirq.c:553
do_softirq linux/kernel/softirq.c:454
do_softirq+0xb2/0xf0 linux/kernel/softirq.c:441
&lt;/IRQ&gt;
&lt;TASK&gt;
__local_bh_enable_ip+0x100/0x120 linux/kernel/softirq.c:381
local_bh_enable linux/./include/linux/bottom_half.h:33
rcu_read_unlock_bh linux/./include/linux/rcupdate.h:851
__dev_queue_xmit+0x871/0x3ee0 linux/net/core/dev.c:4378
dev_queue_xmit linux/./include/linux/netdevice.h:3169
neigh_hh_output linux/./include/net/neighbour.h:526
neigh_output linux/./include/net/neighbour.h:540
ip_finish_output2+0x169f/0x2550 linux/net/ipv4/ip_output.c:235
__ip_finish_output linux/net/ipv4/ip_output.c:313
__ip_finish_output+0x49e/0x950 linux/net/ipv4/ip_output.c:295
ip_finish_output+0x31/0x310 linux/net/ipv4/ip_output.c:323
NF_HOOK_COND linux/./include/linux/netfilter.h:303
ip_output+0x13b/0x2a0 linux/net/ipv4/ip_output.c:433
dst_output linux/./include/net/dst.h:451
ip_local_out linux/net/ipv4/ip_output.c:129
ip_send_skb+0x3e5/0x560 linux/net/ipv4/ip_output.c:1492
udp_send_skb+0x73f/0x1530 linux/net/ipv4/udp.c:963
udp_sendmsg+0x1a36/0x2b40 linux/net/ipv4/udp.c:1250
inet_sendmsg+0x105/0x140 linux/net/ipv4/af_inet.c:850
sock_sendmsg_nosec linux/net/socket.c:730
__sock_sendmsg linux/net/socket.c:745
__sys_sendto+0x42c/0x4e0 linux/net/socket.c:2191
__do_sys_sendto linux/net/socket.c:2203
__se_sys_sendto linux/net/socket.c:2199
__x64_sys_sendto+0xe0/0x1c0 linux/net/socket.c:2199
do_syscall_x64 linux/arch/x86/entry/common.c:52
do_syscall_
---truncated---

CVE-2024-36889:
In the Linux kernel, the following vulnerability has been resolved:
mptcp: ensure snd_nxt is properly initialized on connect
Christoph reported a splat hinting at a corrupted snd_una:
WARNING: CPU: 1 PID: 38 at net/mptcp/protocol.c:1005 __mptcp_clean_una+0x4b3/0x620 net/mptcp/protocol.c:1005
Modules linked in:
CPU: 1 PID: 38 Comm: kworker/1:1 Not tainted 6.9.0-rc1-gbbeac67456c9 #59
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.0-2.el7 04/01/2014
Workqueue: events mptcp_worker
RIP: 0010:__mptcp_clean_una+0x4b3/0x620 net/mptcp/protocol.c:1005
Code: be 06 01 00 00 bf 06 01 00 00 e8 a8 12 e7 fe e9 00 fe ff ff e8
8e 1a e7 fe 0f b7 ab 3e 02 00 00 e9 d3 fd ff ff e8 7d 1a e7 fe
&lt;0f&gt; 0b 4c 8b bb e0 05 00 00 e9 74 fc ff ff e8 6a 1a e7 fe 0f 0b e9
RSP: 0018:ffffc9000013fd48 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff8881029bd280 RCX: ffffffff82382fe4
RDX: ffff8881003cbd00 RSI: ffffffff823833c3 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: fefefefefefefeff R12: ffff888138ba8000
R13: 0000000000000106 R14: ffff8881029bd908 R15: ffff888126560000
FS:  0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f604a5dae38 CR3: 0000000101dac002 CR4: 0000000000170ef0
Call Trace:
&lt;TASK&gt;
__mptcp_clean_una_wakeup net/mptcp/protocol.c:1055 [inline]
mptcp_clean_una_wakeup net/mptcp/protocol.c:1062 [inline]
__mptcp_retrans+0x7f/0x7e0 net/mptcp/protocol.c:2615
mptcp_worker+0x434/0x740 net/mptcp/protocol.c:2767
process_one_work+0x1e0/0x560 kernel/workqueue.c:3254
process_scheduled_works kernel/workqueue.c:3335 [inline]
worker_thread+0x3c7/0x640 kernel/workqueue.c:3416
kthread+0x121/0x170 kernel/kthread.c:388
ret_from_fork+0x44/0x50 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243
&lt;/TASK&gt;
When fallback to TCP happens early on a client socket, snd_nxt
is not yet initialized and any incoming ack will copy such value
into snd_una. If the mptcp worker (dumbly) tries mptcp-level
re-injection after such ack, that would unconditionally trigger a send
buffer cleanup using 'bad' snd_una values.
We could easily disable re-injection for fallback sockets, but such
dumb behavior already helped catching a few subtle issues and a very
low to zero impact in practice.
Instead address the issue always initializing snd_nxt (and write_seq,
for consistency) at connect time.

CVE-2024-36898:
In the Linux kernel, the following vulnerability has been resolved:
gpiolib: cdev: fix uninitialised kfifo
If a line is requested with debounce, and that results in debouncing
in software, and the line is subsequently reconfigured to enable edge
detection then the allocation of the kfifo to contain edge events is
overlooked.  This results in events being written to and read from an
uninitialised kfifo.  Read events are returned to userspace.
Initialise the kfifo in the case where the software debounce is
already active.

CVE-2024-38544:
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
In rxe_comp_queue_pkt() an incoming response packet skb is enqueued to the
resp_pkts queue and then a decision is made whether to run the completer
task inline or schedule it. Finally the skb is dereferenced to bump a 'hw'
performance counter. This is wrong because if the completer task is
already running in a separate thread it may have already processed the skb
and freed it which can cause a seg fault.  This has been observed
infrequently in testing at high scale.
This patch fixes this by changing the order of enqueuing the packet until
after the counter is accessed.

CVE-2024-38564:
In the Linux kernel, the following vulnerability has been resolved:
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
bpf_prog_attach uses attach_type_to_prog_type to enforce proper
attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses
bpf_prog_get and relies on bpf_prog_attach_check_attach_type
to properly verify prog_type &lt;&gt; attach_type association.
Add missing attach_type enforcement for the link_create case.
Otherwise, it's currently possible to attach cgroup_skb prog
types to other cgroup hooks.

CVE-2024-38579:
In the Linux kernel, the following vulnerability has been resolved:
crypto: bcm - Fix pointer arithmetic
In spu2_dump_omd() value of ptr is increased by ciph_key_len
instead of hash_iv_len which could lead to going beyond the
buffer boundaries.
Fix this bug by changing ciph_key_len to hash_iv_len.
Found by Linux Verification Center (linuxtesting.org) with SVACE.

CVE-2024-38583:
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix use-after-free of timer for log writer thread
Patch series "nilfs2: fix log writer related issues".
This bug fix series covers three nilfs2 log writer-related issues,
including a timer use-after-free issue and potential deadlock issue on
unmount, and a potential freeze issue in event synchronization found
during their analysis.  Details are described in each commit log.
This patch (of 3):
A use-after-free issue has been reported regarding the timer sc_timer on
the nilfs_sc_info structure.
The problem is that even though it is used to wake up a sleeping log
writer thread, sc_timer is not shut down until the nilfs_sc_info structure
is about to be freed, and is used regardless of the thread's lifetime.
Fix this issue by limiting the use of sc_timer only while the log writer
thread is alive.

CVE-2024-38588:
In the Linux kernel, the following vulnerability has been resolved:
ftrace: Fix possible use-after-free issue in ftrace_location()
KASAN reports a bug:
BUG: KASAN: use-after-free in ftrace_location+0x90/0x120
Read of size 8 at addr ffff888141d40010 by task insmod/424
CPU: 8 PID: 424 Comm: insmod Tainted: G        W          6.9.0-rc2+
[...]
Call Trace:
&lt;TASK&gt;
dump_stack_lvl+0x68/0xa0
print_report+0xcf/0x610
kasan_report+0xb5/0xe0
ftrace_location+0x90/0x120
register_kprobe+0x14b/0xa40
kprobe_init+0x2d/0xff0 [kprobe_example]
do_one_initcall+0x8f/0x2d0
do_init_module+0x13a/0x3c0
load_module+0x3082/0x33d0
init_module_from_file+0xd2/0x130
__x64_sys_finit_module+0x306/0x440
do_syscall_64+0x68/0x140
entry_SYSCALL_64_after_hwframe+0x71/0x79
The root cause is that, in lookup_rec(), ftrace record of some address
is being searched in ftrace pages of some module, but those ftrace pages
at the same time is being freed in ftrace_release_mod() as the
corresponding module is being deleted:
CPU1                       |      CPU2
register_kprobes() {                | delete_module() {
check_kprobe_address_safe() {     |
arch_check_ftrace_location() {  |
ftrace_location() {           |
lookup_rec() // USE!        |   ftrace_release_mod() // Free!
To fix this issue:
1. Hold rcu lock as accessing ftrace pages in ftrace_location_range();
2. Use ftrace_location_range() instead of lookup_rec() in
ftrace_location();
3. Call synchronize_rcu() before freeing any ftrace pages both in
ftrace_process_locs()/ftrace_release_mod()/ftrace_free_mem().

CVE-2024-39487:
In the Linux kernel, the following vulnerability has been resolved:
bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
In function bond_option_arp_ip_targets_set(), if newval-&gt;string is an
empty string, newval-&gt;string+1 will point to the byte after the
string, causing an out-of-bound read.
BUG: KASAN: slab-out-of-bounds in strlen+0x7d/0xa0 lib/string.c:418
Read of size 1 at addr ffff8881119c4781 by task syz-executor665/8107
CPU: 1 PID: 8107 Comm: syz-executor665 Not tainted 6.7.0-rc7 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014
Call Trace:
&lt;TASK&gt;
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106
print_address_description mm/kasan/report.c:364 [inline]
print_report+0xc1/0x5e0 mm/kasan/report.c:475
kasan_report+0xbe/0xf0 mm/kasan/report.c:588
strlen+0x7d/0xa0 lib/string.c:418
__fortify_strlen include/linux/fortify-string.h:210 [inline]
in4_pton+0xa3/0x3f0 net/core/utils.c:130
bond_option_arp_ip_targets_set+0xc2/0x910
drivers/net/bonding/bond_options.c:1201
__bond_opt_set+0x2a4/0x1030 drivers/net/bonding/bond_options.c:767
__bond_opt_set_notify+0x48/0x150 drivers/net/bonding/bond_options.c:792
bond_opt_tryset_rtnl+0xda/0x160 drivers/net/bonding/bond_options.c:817
bonding_sysfs_store_option+0xa1/0x120 drivers/net/bonding/bond_sysfs.c:156
dev_attr_store+0x54/0x80 drivers/base/core.c:2366
sysfs_kf_write+0x114/0x170 fs/sysfs/file.c:136
kernfs_fop_write_iter+0x337/0x500 fs/kernfs/file.c:334
call_write_iter include/linux/fs.h:2020 [inline]
new_sync_write fs/read_write.c:491 [inline]
vfs_write+0x96a/0xd80 fs/read_write.c:584
ksys_write+0x122/0x250 fs/read_write.c:637
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x63/0x6b
---[ end trace ]---
Fix it by adding a check of string length before using it.

CVE-2024-41012:
In the Linux kernel, the following vulnerability has been resolved:
filelock: Remove locks reliably when fcntl/close race is detected
When fcntl_setlk() races with close(), it removes the created lock with
do_lock_file_wait().
However, LSMs can allow the first do_lock_file_wait() that created the lock
while denying the second do_lock_file_wait() that tries to remove the lock.
Separately, posix_lock_file() could also fail to
remove a lock due to GFP_KERNEL allocation failure (when splitting a range
in the middle).
After the bug has been triggered, use-after-free reads will occur in
lock_get_status() when userspace reads /proc/locks. This can likely be used
to read arbitrary kernel memory, but can't corrupt kernel memory.
Fix it by calling locks_remove_posix() instead, which is designed to
reliably get rid of POSIX locks associated with the given file and
files_struct and is also used by filp_flush().

CVE-2024-41014:
In the Linux kernel, the following vulnerability has been resolved:
xfs: add bounds checking to xlog_recover_process_data
There is a lack of verification of the space occupied by fixed members
of xlog_op_header in the xlog_recover_process_data.
We can create a crafted image to trigger an out of bounds read by
following these steps:
1) Mount an image of xfs, and do some file operations to leave records
2) Before umounting, copy the image for subsequent steps to simulate
abnormal exit. Because umount will ensure that tail_blk and
head_blk are the same, which will result in the inability to enter
xlog_recover_process_data
3) Write a tool to parse and modify the copied image in step 2
4) Make the end of the xlog_op_header entries only 1 byte away from
xlog_rec_header-&gt;h_size
5) xlog_rec_header-&gt;h_num_logops++
6) Modify xlog_rec_header-&gt;h_crc
Fix:
Add a check to make sure there is sufficient space to access fixed members
of xlog_op_header.

CVE-2024-41040:
In the Linux kernel, the following vulnerability has been resolved:
net/sched: Fix UAF when resolving a clash
KASAN reports the following UAF:
BUG: KASAN: slab-use-after-free in tcf_ct_flow_table_process_conn+0x12b/0x380 [act_ct]
Read of size 1 at addr ffff888c07603600 by task handler130/6469
Call Trace:
&lt;IRQ&gt;
dump_stack_lvl+0x48/0x70
print_address_description.constprop.0+0x33/0x3d0
print_report+0xc0/0x2b0
kasan_report+0xd0/0x120
__asan_load1+0x6c/0x80
tcf_ct_flow_table_process_conn+0x12b/0x380 [act_ct]
tcf_ct_act+0x886/0x1350 [act_ct]
tcf_action_exec+0xf8/0x1f0
fl_classify+0x355/0x360 [cls_flower]
__tcf_classify+0x1fd/0x330
tcf_classify+0x21c/0x3c0
sch_handle_ingress.constprop.0+0x2c5/0x500
__netif_receive_skb_core.constprop.0+0xb25/0x1510
__netif_receive_skb_list_core+0x220/0x4c0
netif_receive_skb_list_internal+0x446/0x620
napi_complete_done+0x157/0x3d0
gro_cell_poll+0xcf/0x100
__napi_poll+0x65/0x310
net_rx_action+0x30c/0x5c0
__do_softirq+0x14f/0x491
__irq_exit_rcu+0x82/0xc0
irq_exit_rcu+0xe/0x20
common_interrupt+0xa1/0xb0
&lt;/IRQ&gt;
&lt;TASK&gt;
asm_common_interrupt+0x27/0x40
Allocated by task 6469:
kasan_save_stack+0x38/0x70
kasan_set_track+0x25/0x40
kasan_save_alloc_info+0x1e/0x40
__kasan_krealloc+0x133/0x190
krealloc+0xaa/0x130
nf_ct_ext_add+0xed/0x230 [nf_conntrack]
tcf_ct_act+0x1095/0x1350 [act_ct]
tcf_action_exec+0xf8/0x1f0
fl_classify+0x355/0x360 [cls_flower]
__tcf_classify+0x1fd/0x330
tcf_classify+0x21c/0x3c0
sch_handle_ingress.constprop.0+0x2c5/0x500
__netif_receive_skb_core.constprop.0+0xb25/0x1510
__netif_receive_skb_list_core+0x220/0x4c0
netif_receive_skb_list_internal+0x446/0x620
napi_complete_done+0x157/0x3d0
gro_cell_poll+0xcf/0x100
__napi_poll+0x65/0x310
net_rx_action+0x30c/0x5c0
__do_softirq+0x14f/0x491
Freed by task 6469:
kasan_save_stack+0x38/0x70
kasan_set_track+0x25/0x40
kasan_save_free_info+0x2b/0x60
____kasan_slab_free+0x180/0x1f0
__kasan_slab_free+0x12/0x30
slab_free_freelist_hook+0xd2/0x1a0
__kmem_cache_free+0x1a2/0x2f0
kfree+0x78/0x120
nf_conntrack_free+0x74/0x130 [nf_conntrack]
nf_ct_destroy+0xb2/0x140 [nf_conntrack]
__nf_ct_resolve_clash+0x529/0x5d0 [nf_conntrack]
nf_ct_resolve_clash+0xf6/0x490 [nf_conntrack]
__nf_conntrack_confirm+0x2c6/0x770 [nf_conntrack]
tcf_ct_act+0x12ad/0x1350 [act_ct]
tcf_action_exec+0xf8/0x1f0
fl_classify+0x355/0x360 [cls_flower]
__tcf_classify+0x1fd/0x330
tcf_classify+0x21c/0x3c0
sch_handle_ingress.constprop.0+0x2c5/0x500
__netif_receive_skb_core.constprop.0+0xb25/0x1510
__netif_receive_skb_list_core+0x220/0x4c0
netif_receive_skb_list_internal+0x446/0x620
napi_complete_done+0x157/0x3d0
gro_cell_poll+0xcf/0x100
__napi_poll+0x65/0x310
net_rx_action+0x30c/0x5c0
__do_softirq+0x14f/0x491
The ct may be dropped if a clash has been resolved but is still passed to
the tcf_ct_flow_table_process_conn function for further usage. This issue
can be fixed by retrieving ct from skb again after confirming conntrack.

CVE-2024-41087:
In the Linux kernel, the following vulnerability has been resolved:
ata: libata-core: Fix double free on error
If e.g. the ata_port_alloc() call in ata_host_alloc() fails, we will jump
to the err_out label, which will call devres_release_group().
devres_release_group() will trigger a call to ata_host_release().
ata_host_release() calls kfree(host), so executing the kfree(host) in
ata_host_alloc() will lead to a double free:
kernel BUG at mm/slub.c:553!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 11 PID: 599 Comm: (udev-worker) Not tainted 6.10.0-rc5 #47
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014
RIP: 0010:kfree+0x2cf/0x2f0
Code: 5d 41 5e 41 5f 5d e9 80 d6 ff ff 4d 89 f1 41 b8 01 00 00 00 48 89 d9 48 89 da
RSP: 0018:ffffc90000f377f0 EFLAGS: 00010246
RAX: ffff888112b1f2c0 RBX: ffff888112b1f2c0 RCX: ffff888112b1f320
RDX: 000000000000400b RSI: ffffffffc02c9de5 RDI: ffff888112b1f2c0
RBP: ffffc90000f37830 R08: 0000000000000000 R09: 0000000000000000
R10: ffffc90000f37610 R11: 617461203a736b6e R12: ffffea00044ac780
R13: ffff888100046400 R14: ffffffffc02c9de5 R15: 0000000000000006
FS:  00007f2f1cabe980(0000) GS:ffff88813b380000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2f1c3acf75 CR3: 0000000111724000 CR4: 0000000000750ef0
PKRU: 55555554
Call Trace:
&lt;TASK&gt;
? __die_body.cold+0x19/0x27
? die+0x2e/0x50
? do_trap+0xca/0x110
? do_error_trap+0x6a/0x90
? kfree+0x2cf/0x2f0
? exc_invalid_op+0x50/0x70
? kfree+0x2cf/0x2f0
? asm_exc_invalid_op+0x1a/0x20
? ata_host_alloc+0xf5/0x120 [libata]
? ata_host_alloc+0xf5/0x120 [libata]
? kfree+0x2cf/0x2f0
ata_host_alloc+0xf5/0x120 [libata]
ata_host_alloc_pinfo+0x14/0xa0 [libata]
ahci_init_one+0x6c9/0xd20 [ahci]
Ensure that we will not call kfree(host) twice, by performing the kfree()
only if the devres_open_group() call failed.

CVE-2024-41090:
In the Linux kernel, the following vulnerability has been resolved:
tap: add missing verification for short frame
The cited commit missed to check against the validity of the frame length
in the tap_get_user_xdp() path, which could cause a corrupted skb to be
sent downstack. Even before the skb is transmitted, the
tap_get_user_xdp()--&gt;skb_set_network_header() may assume the size is more
than ETH_HLEN. Once transmitted, this could either cause out-of-bound
access beyond the actual length, or confuse the underlayer with incorrect
or inconsistent header length in the skb metadata.
In the alternative path, tap_get_user() already prohibits short frame which
has the length less than Ethernet header size from being transmitted.
This is to drop any frame shorter than the Ethernet header size just like
how tap_get_user() does.
CVE: CVE-2024-41090

CVE-2024-41091:
In the Linux kernel, the following vulnerability has been resolved:
tun: add missing verification for short frame
The cited commit missed to check against the validity of the frame length
in the tun_xdp_one() path, which could cause a corrupted skb to be sent
downstack. Even before the skb is transmitted, the
tun_xdp_one--&gt;eth_type_trans() may access the Ethernet header although it
can be less than ETH_HLEN. Once transmitted, this could either cause
out-of-bound access beyond the actual length, or confuse the underlayer
with incorrect or inconsistent header length in the skb metadata.
In the alternative path, tun_get_user() already prohibits short frame which
has the length less than Ethernet header size from being transmitted for
IFF_TAP.
This is to drop any frame shorter than the Ethernet header size just like
how tun_get_user() does.
CVE: CVE-2024-41091

CVE-2024-42232:
In the Linux kernel, the following vulnerability has been resolved:
libceph: fix race between delayed_work() and ceph_monc_stop()
The way the delayed work is handled in ceph_monc_stop() is prone to
races with mon_fault() and possibly also finish_hunting().  Both of
these can requeue the delayed work which wouldn't be canceled by any of
the following code in case that happens after cancel_delayed_work_sync()
runs -- __close_session() doesn't mess with the delayed work in order
to avoid interfering with the hunting interval logic.  This part was
missed in commit b5d91704f53e ("libceph: behave in mon_fault() if
cur_mon &lt; 0") and use-after-free can still ensue on monc and objects
that hang off of it, with monc-&gt;auth and monc-&gt;monmap being
particularly susceptible to quickly being reused.
To fix this:
- clear monc-&gt;cur_mon and monc-&gt;hunting as part of closing the session
in ceph_monc_stop()
- bail from delayed_work() if monc-&gt;cur_mon is cleared, similar to how
it's done in mon_fault() and finish_hunting() (based on monc-&gt;hunting)
- call cancel_delayed_work_sync() after the session is closed

CVE-2024-42265:
In the Linux kernel, the following vulnerability has been resolved:
protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
both callers have verified that fd is not greater than -&gt;max_fds;
however, misprediction might end up with
tofree = fdt-&gt;fd[fd];
being speculatively executed.  That's wrong for the same reasons
why it's wrong in close_fd()/file_close_fd_locked(); the same
solution applies - array_index_nospec(fd, fdt-&gt;max_fds) could differ
from fd only in case of speculative execution on mispredicted path.

CVE-2024-42280:
In the Linux kernel, the following vulnerability has been resolved:
mISDN: Fix a use after free in hfcmulti_tx()
Don't dereference *sp after calling dev_kfree_skb(*sp).

CVE-2024-42285:
In the Linux kernel, the following vulnerability has been resolved:
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with
an existing struct iw_cm_id (cm_id) as follows:
conn_id-&gt;cm_id.iw = cm_id;
cm_id-&gt;context = conn_id;
cm_id-&gt;cm_handler = cma_iw_handler;
rdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make
sure that cm_work_handler() does not trigger a use-after-free by only
freeing of the struct rdma_id_private after all pending work has finished.

CVE-2024-42286:
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: validate nvme_local_port correctly
The driver load failed with error message,
qla2xxx [0000:04:00.0]-ffff:0: register_localport failed: ret=ffffffef
and with a kernel crash,
BUG: unable to handle kernel NULL pointer dereference at 0000000000000070
Workqueue: events_unbound qla_register_fcport_fn [qla2xxx]
RIP: 0010:nvme_fc_register_remoteport+0x16/0x430 [nvme_fc]
RSP: 0018:ffffaaa040eb3d98 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff9dfb46b78c00 RCX: 0000000000000000
RDX: ffff9dfb46b78da8 RSI: ffffaaa040eb3e08 RDI: 0000000000000000
RBP: ffff9dfb612a0a58 R08: ffffffffaf1d6270 R09: 3a34303a30303030
R10: 34303a303030305b R11: 2078787832616c71 R12: ffff9dfb46b78dd4
R13: ffff9dfb46b78c24 R14: ffff9dfb41525300 R15: ffff9dfb46b78da8
FS:  0000000000000000(0000) GS:ffff9dfc67c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000018da10004 CR4: 00000000000206f0
Call Trace:
qla_nvme_register_remote+0xeb/0x1f0 [qla2xxx]
? qla2x00_dfs_create_rport+0x231/0x270 [qla2xxx]
qla2x00_update_fcport+0x2a1/0x3c0 [qla2xxx]
qla_register_fcport_fn+0x54/0xc0 [qla2xxx]
Exit the qla_nvme_register_remote() function when qla_nvme_register_hba()
fails and correctly validate nvme_local_port.

CVE-2024-42288:
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix for possible memory corruption
Init Control Block is dereferenced incorrectly.  Correctly dereference ICB

CVE-2024-42289:
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: During vport delete send async logout explicitly
During vport delete, it is observed that during unload we hit a crash
because of stale entries in outstanding command array.  For all these stale
I/O entries, eh_abort was issued and aborted (fast_fail_io = 2009h) but
I/Os could not complete while vport delete is in process of deleting.
BUG: kernel NULL pointer dereference, address: 000000000000001c
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP NOPTI
Workqueue: qla2xxx_wq qla_do_work [qla2xxx]
RIP: 0010:dma_direct_unmap_sg+0x51/0x1e0
RSP: 0018:ffffa1e1e150fc68 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000000001
RDX: 0000000000000021 RSI: 0000000000000000 RDI: ffff8ce208a7a0d0
RBP: ffff8ce208a7a0d0 R08: 0000000000000000 R09: ffff8ce378aac9c8
R10: ffff8ce378aac8a0 R11: ffffa1e1e150f9d8 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8ce378aac9c8 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8d217f000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000000001c CR3: 0000002089acc000 CR4: 0000000000350ee0
Call Trace:
&lt;TASK&gt;
qla2xxx_qpair_sp_free_dma+0x417/0x4e0
? qla2xxx_qpair_sp_compl+0x10d/0x1a0
? qla2x00_status_entry+0x768/0x2830
? newidle_balance+0x2f0/0x430
? dequeue_entity+0x100/0x3c0
? qla24xx_process_response_queue+0x6a1/0x19e0
? __schedule+0x2d5/0x1140
? qla_do_work+0x47/0x60
? process_one_work+0x267/0x440
? process_one_work+0x440/0x440
? worker_thread+0x2d/0x3d0
? process_one_work+0x440/0x440
? kthread+0x156/0x180
? set_kthread_struct+0x50/0x50
? ret_from_fork+0x22/0x30
&lt;/TASK&gt;
Send out async logout explicitly for all the ports during vport delete.

CVE-2024-42292:
In the Linux kernel, the following vulnerability has been resolved:
kobject_uevent: Fix OOB access within zap_modalias_env()
zap_modalias_env() wrongly calculates size of memory block to move, so
will cause OOB memory access issue if variable MODALIAS is not the last
one within its @env parameter, fixed by correcting size to memmove.

CVE-2024-43861:
In the Linux kernel, the following vulnerability has been resolved:
net: usb: qmi_wwan: fix memory leak for not ip packets
Free the unused skb when not ip packets arrive.

CVE-2024-43871:
In the Linux kernel, the following vulnerability has been resolved:
devres: Fix memory leakage caused by driver API devm_free_percpu()
It will cause memory leakage when use driver API devm_free_percpu()
to free memory allocated by devm_alloc_percpu(), fixed by using
devres_release() instead of devres_destroy() within devm_free_percpu().

CVE-2024-43882:
In the Linux kernel, the following vulnerability has been resolved:
exec: Fix ToCToU between perm check and set-uid/gid usage
When opening a file for exec via do_filp_open(), permission checking is
done against the file's metadata at that moment, and on success, a file
pointer is passed back. Much later in the execve() code path, the file
metadata (specifically mode, uid, and gid) is used to determine if/how
to set the uid and gid. However, those values may have changed since the
permissions check, meaning the execution may gain unintended privileges.
For example, if a file could change permissions from executable and not
set-id:
---------x 1 root root 16048 Aug  7 13:16 target
to set-id and non-executable:
---S------ 1 root root 16048 Aug  7 13:16 target
it is possible to gain root privileges when execution should have been
disallowed.
While this race condition is rare in real-world scenarios, it has been
observed (and proven exploitable) when package managers are updating
the setuid bits of installed programs. Such files start with being
world-executable but then are adjusted to be group-exec with a set-uid
bit. For example, "chmod o-x,u+s target" makes "target" executable only
by uid "root" and gid "cdrom", while also becoming setuid-root:
-rwxr-xr-x 1 root cdrom 16048 Aug  7 13:16 target
becomes:
-rwsr-xr-- 1 root cdrom 16048 Aug  7 13:16 target
But racing the chmod means users without group "cdrom" membership can
get the permission to execute "target" just before the chmod, and when
the chmod finishes, the exec reaches brpm_fill_uid(), and performs the
setuid to root, violating the expressed authorization of "only cdrom
group members can setuid to root".
Re-check that we still have execute permissions in case the metadata
has changed. It would be better to keep a copy from the perm-check time,
but until we can do that refactoring, the least-bad option is to do a
full inode_permission() call (under inode lock). It is understood that
this is safe against dead-locks, but hardly optimal.

CVE-2024-44931:
In the Linux kernel, the following vulnerability has been resolved:
gpio: prevent potential speculation leaks in gpio_device_get_desc()
Userspace may trigger a speculative read of an address outside the gpio
descriptor array.
Users can do that by calling gpio_ioctl() with an offset out of range.
Offset is copied from user and then used as an array index to get
the gpio descriptor without sanitization in gpio_device_get_desc().
This change ensures that the offset is sanitized by using
array_index_nospec() to mitigate any possibility of speculative
information leaks.
This bug was discovered and resolved using Coverity Static Analysis
Security Testing (SAST) by Synopsys, Inc.

CVE-2024-44958:
In the Linux kernel, the following vulnerability has been resolved:
sched/smt: Fix unbalance sched_smt_present dec/inc
I got the following warn report while doing stress test:
jump label: negative count!
WARNING: CPU: 3 PID: 38 at kernel/jump_label.c:263 static_key_slow_try_dec+0x9d/0xb0
Call Trace:
&lt;TASK&gt;
__static_key_slow_dec_cpuslocked+0x16/0x70
sched_cpu_deactivate+0x26e/0x2a0
cpuhp_invoke_callback+0x3ad/0x10d0
cpuhp_thread_fun+0x3f5/0x680
smpboot_thread_fn+0x56d/0x8d0
kthread+0x309/0x400
ret_from_fork+0x41/0x70
ret_from_fork_asm+0x1b/0x30
&lt;/TASK&gt;
Because when cpuset_cpu_inactive() fails in sched_cpu_deactivate(),
the cpu offline failed, but sched_smt_present is decremented before
calling sched_cpu_deactivate(), it leads to unbalanced dec/inc, so
fix it by incrementing sched_smt_present in the error path.

CVE-2024-44987:
In the Linux kernel, the following vulnerability has been resolved:
ipv6: prevent UAF in ip6_send_skb()
syzbot reported an UAF in ip6_send_skb() [1]
After ip6_local_out() has returned, we no longer can safely
dereference rt, unless we hold rcu_read_lock().
A similar issue has been fixed in commit
a688caa34beb ("ipv6: take rcu lock in rawv6_send_hdrinc()")
Another potential issue in ip6_finish_output2() is handled in a
separate patch.
[1]
BUG: KASAN: slab-use-after-free in ip6_send_skb+0x18d/0x230 net/ipv6/ip6_output.c:1964
Read of size 8 at addr ffff88806dde4858 by task syz.1.380/6530
CPU: 1 UID: 0 PID: 6530 Comm: syz.1.380 Not tainted 6.11.0-rc3-syzkaller-00306-gdf6cbc62cc9b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
&lt;TASK&gt;
__dump_stack lib/dump_stack.c:93 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119
print_address_description mm/kasan/report.c:377 [inline]
print_report+0x169/0x550 mm/kasan/report.c:488
kasan_report+0x143/0x180 mm/kasan/report.c:601
ip6_send_skb+0x18d/0x230 net/ipv6/ip6_output.c:1964
rawv6_push_pending_frames+0x75c/0x9e0 net/ipv6/raw.c:588
rawv6_sendmsg+0x19c7/0x23c0 net/ipv6/raw.c:926
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg+0x1a6/0x270 net/socket.c:745
sock_write_iter+0x2dd/0x400 net/socket.c:1160
do_iter_readv_writev+0x60a/0x890
vfs_writev+0x37c/0xbb0 fs/read_write.c:971
do_writev+0x1b1/0x350 fs/read_write.c:1018
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f936bf79e79
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 &lt;48&gt; 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f936cd7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
RAX: ffffffffffffffda RBX: 00007f936c115f80 RCX: 00007f936bf79e79
RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000004
RBP: 00007f936bfe7916 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f936c115f80 R15: 00007fff2860a7a8
&lt;/TASK&gt;
Allocated by task 6530:
kasan_save_stack mm/kasan/common.c:47 [inline]
kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
unpoison_slab_object mm/kasan/common.c:312 [inline]
__kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338
kasan_slab_alloc include/linux/kasan.h:201 [inline]
slab_post_alloc_hook mm/slub.c:3988 [inline]
slab_alloc_node mm/slub.c:4037 [inline]
kmem_cache_alloc_noprof+0x135/0x2a0 mm/slub.c:4044
dst_alloc+0x12b/0x190 net/core/dst.c:89
ip6_blackhole_route+0x59/0x340 net/ipv6/route.c:2670
make_blackhole net/xfrm/xfrm_policy.c:3120 [inline]
xfrm_lookup_route+0xd1/0x1c0 net/xfrm/xfrm_policy.c:3313
ip6_dst_lookup_flow+0x13e/0x180 net/ipv6/ip6_output.c:1257
rawv6_sendmsg+0x1283/0x23c0 net/ipv6/raw.c:898
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg+0x1a6/0x270 net/socket.c:745
____sys_sendmsg+0x525/0x7d0 net/socket.c:2597
___sys_sendmsg net/socket.c:2651 [inline]
__sys_sendmsg+0x2b0/0x3a0 net/socket.c:2680
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
Freed by task 45:
kasan_save_stack mm/kasan/common.c:47 [inline]
kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
poison_slab_object+0xe0/0x150 mm/kasan/common.c:240
__kasan_slab_free+0x37/0x60 mm/kasan/common.c:256
kasan_slab_free include/linux/kasan.h:184 [inline]
slab_free_hook mm/slub.c:2252 [inline]
slab_free mm/slub.c:4473 [inline]
kmem_cache_free+0x145/0x350 mm/slub.c:4548
dst_destroy+0x2ac/0x460 net/core/dst.c:124
rcu_do_batch kernel/rcu/tree.c:2569 [inline]
rcu_core+0xafd/0x1830 kernel/rcu/tree.
---truncated---

CVE-2024-45003:
In the Linux kernel, the following vulnerability has been resolved:
vfs: Don't evict inode under the inode lru traversing context
The inode reclaiming process(See function prune_icache_sb) collects all
reclaimable inodes and mark them with I_FREEING flag at first, at that
time, other processes will be stuck if they try getting these inodes
(See function find_inode_fast), then the reclaiming process destroy the
inodes by function dispose_list(). Some filesystems(eg. ext4 with
ea_inode feature, ubifs with xattr) may do inode lookup in the inode
evicting callback function, if the inode lookup is operated under the
inode lru traversing context, deadlock problems may happen.
Case 1: In function ext4_evict_inode(), the ea inode lookup could happen
if ea_inode feature is enabled, the lookup process will be stuck
under the evicting context like this:
1. File A has inode i_reg and an ea inode i_ea
2. getfattr(A, xattr_buf) // i_ea is added into lru // lru-&gt;i_ea
3. Then, following three processes running like this:
PA                              PB
echo 2 &gt; /proc/sys/vm/drop_caches
shrink_slab
prune_dcache_sb
// i_reg is added into lru, lru-&gt;i_ea-&gt;i_reg
prune_icache_sb
list_lru_walk_one
inode_lru_isolate
i_ea-&gt;i_state |= I_FREEING // set inode state
inode_lru_isolate
__iget(i_reg)
spin_unlock(&amp;i_reg-&gt;i_lock)
spin_unlock(lru_lock)
rm file A
i_reg-&gt;nlink = 0
iput(i_reg) // i_reg-&gt;nlink is 0, do evict
ext4_evict_inode
ext4_xattr_delete_inode
ext4_xattr_inode_dec_ref_all
ext4_xattr_inode_iget
ext4_iget(i_ea-&gt;i_ino)
iget_locked
find_inode_fast
__wait_on_freeing_inode(i_ea) ----→ AA deadlock
dispose_list // cannot be executed by prune_icache_sb
wake_up_bit(&amp;i_ea-&gt;i_state)
Case 2: In deleted inode writing function ubifs_jnl_write_inode(), file
deleting process holds BASEHD's wbuf-&gt;io_mutex while getting the
xattr inode, which could race with inode reclaiming process(The
reclaiming process could try locking BASEHD's wbuf-&gt;io_mutex in
inode evicting function), then an ABBA deadlock problem would
happen as following:
1. File A has inode ia and a xattr(with inode ixa), regular file B has
inode ib and a xattr.
2. getfattr(A, xattr_buf) // ixa is added into lru // lru-&gt;ixa
3. Then, following three processes running like this:
PA                PB                        PC
echo 2 &gt; /proc/sys/vm/drop_caches
shrink_slab
prune_dcache_sb
// ib and ia are added into lru, lru-&gt;ixa-&gt;ib-&gt;ia
prune_icache_sb
list_lru_walk_one
inode_lru_isolate
ixa-&gt;i_state |= I_FREEING // set inode state
inode_lru_isolate
__iget(ib)
spin_unlock(&amp;ib-&gt;i_lock)
spin_unlock(lru_lock)
rm file B
ib-&gt;nlink = 0
rm file A
iput(ia)
ubifs_evict_inode(ia)
ubifs_jnl_delete_inode(ia)
ubifs_jnl_write_inode(ia)
make_reservation(BASEHD) // Lock wbuf-&gt;io_mutex
ubifs_iget(ixa-&gt;i_ino)
iget_locked
find_inode_fast
__wait_on_freeing_inode(ixa)
|          iput(ib) // ib-&gt;nlink is 0, do evict
|           ubifs_evict_inode
|            ubifs_jnl_delete_inode(ib)
↓             ubifs_jnl_write_inode
ABBA deadlock ←-----make_reservation(BASEHD)
dispose_list // cannot be executed by prune_icache_sb
wake_up_bit(&amp;ixa-&gt;i_state)
Fix the possible deadlock by using new inode state flag I_LRU_ISOLATING
to pin the inode in memory while inode_lru_isolate(
---truncated---

CVE-2024-45018:
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: initialise extack before use
Fix missing initialisation of extack in flow offload.

CVE-2024-45025:
In the Linux kernel, the following vulnerability has been resolved:
fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
copy_fd_bitmaps(new, old, count) is expected to copy the first
count/BITS_PER_LONG bits from old-&gt;full_fds_bits[] and fill
the rest with zeroes.  What it does is copying enough words
(BITS_TO_LONGS(count/BITS_PER_LONG)), then memsets the rest.
That works fine, *if* all bits past the cutoff point are
clear.  Otherwise we are risking garbage from the last word
we'd copied.
For most of the callers that is true - expand_fdtable() has
count equal to old-&gt;max_fds, so there's no open descriptors
past count, let alone fully occupied words in -&gt;open_fds[],
which is what bits in -&gt;full_fds_bits[] correspond to.
The other caller (dup_fd()) passes sane_fdtable_size(old_fdt, max_fds),
which is the smallest multiple of BITS_PER_LONG that covers all
opened descriptors below max_fds.  In the common case (copying on
fork()) max_fds is ~0U, so all opened descriptors will be below
it and we are fine, by the same reasons why the call in expand_fdtable()
is safe.
Unfortunately, there is a case where max_fds is less than that
and where we might, indeed, end up with junk in -&gt;full_fds_bits[] -
close_range(from, to, CLOSE_RANGE_UNSHARE) with
* descriptor table being currently shared
* 'to' being above the current capacity of descriptor table
* 'from' being just under some chunk of opened descriptors.
In that case we end up with observably wrong behaviour - e.g. spawn
a child with CLONE_FILES, get all descriptors in range 0..127 open,
then close_range(64, ~0U, CLOSE_RANGE_UNSHARE) and watch dup(0) ending
up with descriptor #128, despite #64 being observably not open.
The minimally invasive fix would be to deal with that in dup_fd().
If this proves to add measurable overhead, we can go that way, but
let's try to fix copy_fd_bitmaps() first.
* new helper: bitmap_copy_and_expand(to, from, bits_to_copy, size).
* make copy_fd_bitmaps() take the bitmap size in words, rather than
bits; it's 'count' argument is always a multiple of BITS_PER_LONG,
so we are not losing any information, and that way we can use the
same helper for all three bitmaps - compiler will see that count
is a multiple of BITS_PER_LONG for the large ones, so it'll generate
plain memcpy()+memset().
Reproducer added to tools/testing/selftests/core/close_range_test.c

CVE-2024-46673:
In the Linux kernel, the following vulnerability has been resolved:
scsi: aacraid: Fix double-free on probe failure
aac_probe_one() calls hardware-specific init functions through the
aac_driver_ident::init pointer, all of which eventually call down to
aac_init_adapter().
If aac_init_adapter() fails after allocating memory for aac_dev::queues,
it frees the memory but does not clear that member.
After the hardware-specific init function returns an error,
aac_probe_one() goes down an error path that frees the memory pointed to
by aac_dev::queues, resulting.in a double-free.

CVE-2024-46695:
In the Linux kernel, the following vulnerability has been resolved:
selinux,smack: don't bypass permissions check in inode_setsecctx hook
Marek Gresko reports that the root user on an NFS client is able to
change the security labels on files on an NFS filesystem that is
exported with root squashing enabled.
The end of the kerneldoc comment for __vfs_setxattr_noperm() states:
*  This function requires the caller to lock the inode's i_mutex before it
*  is executed. It also assumes that the caller will make the appropriate
*  permission checks.
nfsd_setattr() does do permissions checking via fh_verify() and
nfsd_permission(), but those don't do all the same permissions checks
that are done by security_inode_setxattr() and its related LSM hooks do.
Since nfsd_setattr() is the only consumer of security_inode_setsecctx(),
simplest solution appears to be to replace the call to
__vfs_setxattr_noperm() with a call to __vfs_setxattr_locked().  This
fixes the above issue and has the added benefit of causing nfsd to
recall conflicting delegations on a file when a client tries to change
its security label.

CVE-2024-46715:
In the Linux kernel, the following vulnerability has been resolved:
driver: iio: add missing checks on iio_info's callback access
Some callbacks from iio_info structure are accessed without any check, so
if a driver doesn't implement them trying to access the corresponding
sysfs entries produce a kernel oops such as:
[ 2203.527791] Unable to handle kernel NULL pointer dereference at virtual address 00000000 when execute
[...]
[ 2203.783416] Call trace:
[ 2203.783429]  iio_read_channel_info_avail from dev_attr_show+0x18/0x48
[ 2203.789807]  dev_attr_show from sysfs_kf_seq_show+0x90/0x120
[ 2203.794181]  sysfs_kf_seq_show from seq_read_iter+0xd0/0x4e4
[ 2203.798555]  seq_read_iter from vfs_read+0x238/0x2a0
[ 2203.802236]  vfs_read from ksys_read+0xa4/0xd4
[ 2203.805385]  ksys_read from ret_fast_syscall+0x0/0x54
[ 2203.809135] Exception stack(0xe0badfa8 to 0xe0badff0)
[ 2203.812880] dfa0:                   00000003 b6f10f80 00000003 b6eab000 00020000 00000000
[ 2203.819746] dfc0: 00000003 b6f10f80 7ff00000 00000003 00000003 00000000 00020000 00000000
[ 2203.826619] dfe0: b6e1bc88 bed80958 b6e1bc94 b6e1bcb0
[ 2203.830363] Code: bad PC value
[ 2203.832695] ---[ end trace 0000000000000000 ]---

CVE-2024-46722:
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix mc_data out-of-bounds read warning
Clear warning that read mc_data[i-1] may out-of-bounds.

CVE-2024-46723:
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix ucode out-of-bounds read warning
Clear warning that read ucode[] may out-of-bounds.

CVE-2024-46737:
In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp: fix kernel crash if commands allocation fails
If the commands allocation fails in nvmet_tcp_alloc_cmds()
the kernel crashes in nvmet_tcp_release_queue_work() because of
a NULL pointer dereference.
nvmet: failed to install queue 0 cntlid 1 ret 6
Unable to handle kernel NULL pointer dereference at
virtual address 0000000000000008
Fix the bug by setting queue-&gt;nr_cmds to zero in case
nvmet_tcp_alloc_cmd() fails.

CVE-2024-46738:
In the Linux kernel, the following vulnerability has been resolved:
VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
When removing a resource from vmci_resource_table in
vmci_resource_remove(), the search is performed using the resource
handle by comparing context and resource fields.
It is possible though to create two resources with different types
but same handle (same context and resource fields).
When trying to remove one of the resources, vmci_resource_remove()
may not remove the intended one, but the object will still be freed
as in the case of the datagram type in vmci_datagram_destroy_handle().
vmci_resource_table will still hold a pointer to this freed resource
leading to a use-after-free vulnerability.
BUG: KASAN: use-after-free in vmci_handle_is_equal include/linux/vmw_vmci_defs.h:142 [inline]
BUG: KASAN: use-after-free in vmci_resource_remove+0x3a1/0x410 drivers/misc/vmw_vmci/vmci_resource.c:147
Read of size 4 at addr ffff88801c16d800 by task syz-executor197/1592
Call Trace:
&lt;TASK&gt;
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x82/0xa9 lib/dump_stack.c:106
print_address_description.constprop.0+0x21/0x366 mm/kasan/report.c:239
__kasan_report.cold+0x7f/0x132 mm/kasan/report.c:425
kasan_report+0x38/0x51 mm/kasan/report.c:442
vmci_handle_is_equal include/linux/vmw_vmci_defs.h:142 [inline]
vmci_resource_remove+0x3a1/0x410 drivers/misc/vmw_vmci/vmci_resource.c:147
vmci_qp_broker_detach+0x89a/0x11b9 drivers/misc/vmw_vmci/vmci_queue_pair.c:2182
ctx_free_ctx+0x473/0xbe1 drivers/misc/vmw_vmci/vmci_context.c:444
kref_put include/linux/kref.h:65 [inline]
vmci_ctx_put drivers/misc/vmw_vmci/vmci_context.c:497 [inline]
vmci_ctx_destroy+0x170/0x1d6 drivers/misc/vmw_vmci/vmci_context.c:195
vmci_host_close+0x125/0x1ac drivers/misc/vmw_vmci/vmci_host.c:143
__fput+0x261/0xa34 fs/file_table.c:282
task_work_run+0xf0/0x194 kernel/task_work.c:164
tracehook_notify_resume include/linux/tracehook.h:189 [inline]
exit_to_user_mode_loop+0x184/0x189 kernel/entry/common.c:187
exit_to_user_mode_prepare+0x11b/0x123 kernel/entry/common.c:220
__syscall_exit_to_user_mode_work kernel/entry/common.c:302 [inline]
syscall_exit_to_user_mode+0x18/0x42 kernel/entry/common.c:313
do_syscall_64+0x41/0x85 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x6e/0x0
This change ensures the type is also checked when removing
the resource from vmci_resource_table in vmci_resource_remove().

CVE-2024-46739:
In the Linux kernel, the following vulnerability has been resolved:
uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
For primary VM Bus channels, primary_channel pointer is always NULL. This
pointer is valid only for the secondary channels. Also, rescind callback
is meant for primary channels only.
Fix NULL pointer dereference by retrieving the device_obj from the parent
for the primary channel.

CVE-2024-46744:
In the Linux kernel, the following vulnerability has been resolved:
Squashfs: sanity check symbolic link size
Syzkiller reports a "KMSAN: uninit-value in pick_link" bug.
This is caused by an uninitialised page, which is ultimately caused
by a corrupted symbolic link size read from disk.
The reason why the corrupted symlink size causes an uninitialised
page is due to the following sequence of events:
1. squashfs_read_inode() is called to read the symbolic
link from disk.  This assigns the corrupted value
3875536935 to inode-&gt;i_size.
2. Later squashfs_symlink_read_folio() is called, which assigns
this corrupted value to the length variable, which being a
signed int, overflows producing a negative number.
3. The following loop that fills in the page contents checks that
the copied bytes is less than length, which being negative means
the loop is skipped, producing an uninitialised page.
This patch adds a sanity check which checks that the symbolic
link size is not larger than expected.
--
V2: fix spelling mistake.

CVE-2024-46755:
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
mwifiex_get_priv_by_id() returns the priv pointer corresponding to
the bss_num and bss_type, but without checking if the priv is actually
currently in use.
Unused priv pointers do not have a wiphy attached to them which can
lead to NULL pointer dereferences further down the callstack.  Fix
this by returning only used priv pointers which have priv-&gt;bss_mode
set to something else than NL80211_IFTYPE_UNSPECIFIED.
Said NULL pointer dereference happened when an Accesspoint was started
with wpa_supplicant -i mlan0 with this config:
network={
ssid="somessid"
mode=2
frequency=2412
key_mgmt=WPA-PSK WPA-PSK-SHA256
proto=RSN
group=CCMP
pairwise=CCMP
psk="12345678"
}
When waiting for the AP to be established, interrupting wpa_supplicant
with &lt;ctrl-c&gt; and starting it again this happens:
| Unable to handle kernel NULL pointer dereference at virtual address 0000000000000140
| Mem abort info:
|   ESR = 0x0000000096000004
|   EC = 0x25: DABT (current EL), IL = 32 bits
|   SET = 0, FnV = 0
|   EA = 0, S1PTW = 0
|   FSC = 0x04: level 0 translation fault
| Data abort info:
|   ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000
|   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
|   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
| user pgtable: 4k pages, 48-bit VAs, pgdp=0000000046d96000
| [0000000000000140] pgd=0000000000000000, p4d=0000000000000000
| Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP
| Modules linked in: caam_jr caamhash_desc spidev caamalg_desc crypto_engine authenc libdes mwifiex_sdio
+mwifiex crct10dif_ce cdc_acm onboard_usb_hub fsl_imx8_ddr_perf imx8m_ddrc rtc_ds1307 lm75 rtc_snvs
+imx_sdma caam imx8mm_thermal spi_imx error imx_cpufreq_dt fuse ip_tables x_tables ipv6
| CPU: 0 PID: 8 Comm: kworker/0:1 Not tainted 6.9.0-00007-g937242013fce-dirty #18
| Hardware name: somemachine (DT)
| Workqueue: events sdio_irq_work
| pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
| pc : mwifiex_get_cfp+0xd8/0x15c [mwifiex]
| lr : mwifiex_get_cfp+0x34/0x15c [mwifiex]
| sp : ffff8000818b3a70
| x29: ffff8000818b3a70 x28: ffff000006bfd8a5 x27: 0000000000000004
| x26: 000000000000002c x25: 0000000000001511 x24: 0000000002e86bc9
| x23: ffff000006bfd996 x22: 0000000000000004 x21: ffff000007bec000
| x20: 000000000000002c x19: 0000000000000000 x18: 0000000000000000
| x17: 000000040044ffff x16: 00500072b5503510 x15: ccc283740681e517
| x14: 0201000101006d15 x13: 0000000002e8ff43 x12: 002c01000000ffb1
| x11: 0100000000000000 x10: 02e8ff43002c0100 x9 : 0000ffb100100157
| x8 : ffff000003d20000 x7 : 00000000000002f1 x6 : 00000000ffffe124
| x5 : 0000000000000001 x4 : 0000000000000003 x3 : 0000000000000000
| x2 : 0000000000000000 x1 : 0001000000011001 x0 : 0000000000000000
| Call trace:
|  mwifiex_get_cfp+0xd8/0x15c [mwifiex]
|  mwifiex_parse_single_response_buf+0x1d0/0x504 [mwifiex]
|  mwifiex_handle_event_ext_scan_report+0x19c/0x2f8 [mwifiex]
|  mwifiex_process_sta_event+0x298/0xf0c [mwifiex]
|  mwifiex_process_event+0x110/0x238 [mwifiex]
|  mwifiex_main_process+0x428/0xa44 [mwifiex]
|  mwifiex_sdio_interrupt+0x64/0x12c [mwifiex_sdio]
|  process_sdio_pending_irqs+0x64/0x1b8
|  sdio_irq_work+0x4c/0x7c
|  process_one_work+0x148/0x2a0
|  worker_thread+0x2fc/0x40c
|  kthread+0x110/0x114
|  ret_from_fork+0x10/0x20
| Code: a94153f3 a8c37bfd d50323bf d65f03c0 (f940a000)
| ---[ end trace 0000000000000000 ]---

CVE-2024-46756:
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large
negative number such as -9223372036854775808 is provided by the user.
Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.

CVE-2024-46758:
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (lm95234) Fix underflows seen when writing limit attributes
DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large
negative number such as -9223372036854775808 is provided by the user.
Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.

CVE-2024-46759:
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (adc128d818) Fix underflows seen when writing limit attributes
DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large
negative number such as -9223372036854775808 is provided by the user.
Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.

CVE-2024-46761:
In the Linux kernel, the following vulnerability has been resolved:
pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
The hotplug driver for powerpc (pci/hotplug/pnv_php.c) causes a kernel
crash when we try to hot-unplug/disable the PCIe switch/bridge from
the PHB.
The crash occurs because although the MSI data structure has been
released during disable/hot-unplug path and it has been assigned
with NULL, still during unregistration the code was again trying to
explicitly disable the MSI which causes the NULL pointer dereference and
kernel crash.
The patch fixes the check during unregistration path to prevent invoking
pci_disable_msi/msix() since its data structure is already freed.

CVE-2024-46777:
In the Linux kernel, the following vulnerability has been resolved:
udf: Avoid excessive partition lengths
Avoid mounting filesystems where the partition would overflow the
32-bits used for block number. Also refuse to mount filesystems where
the partition length is so large we cannot safely index bits in a
block bitmap.
  </description>
  <references>
    <reference href="http://mirrors.openanolis.cn/anolis/8.5/updateinfo/ansa-2024-1185.xml" id="ANSA-2024:1185" type="ANOLIS8"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52478" cvss3="6.0/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" id="CVE-2023-52478" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52628" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2023-52628" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36883" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2024-36883" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36886" cvss3="7.1/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2024-36886" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36889" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-36889" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36898" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-36898" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38544" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H" id="CVE-2024-38544" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38564" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-38564" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38579" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-38579" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38583" cvss3="5.2/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H" id="CVE-2024-38583" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38588" cvss3="5.2/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H" id="CVE-2024-38588" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39487" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-39487" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41012" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-41012" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41014" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" id="CVE-2024-41014" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41040" cvss3="5.2/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H" id="CVE-2024-41040" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41087" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2024-41087" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41090" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" id="CVE-2024-41090" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41091" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" id="CVE-2024-41091" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42232" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-42232" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42265" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-42265" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42280" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2024-42280" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42285" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2024-42285" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42286" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-42286" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42288" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-42288" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42289" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-42289" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42292" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" id="CVE-2024-42292" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43861" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-43861" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43871" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-43871" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43882" cvss3="7.0/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" id="CVE-2024-43882" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44931" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" id="CVE-2024-44931" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44958" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-44958" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44987" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" id="CVE-2024-44987" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45003" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-45003" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45018" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-45018" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45025" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-45025" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46673" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" id="CVE-2024-46673" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46695" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L" id="CVE-2024-46695" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46715" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-46715" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46722" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2024-46722" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46723" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" id="CVE-2024-46723" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46737" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-46737" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46738" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-46738" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46739" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-46739" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46744" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-46744" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46755" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-46755" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46756" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-46756" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46758" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-46758" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46759" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-46759" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46761" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-46761" type="cve"/>
    <reference href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46777" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" id="CVE-2024-46777" type="cve"/>
  </references>
  <pkglist>
    <collection short="anolis8.9">
    <name>Anolis 8</name>
      <package arch="aarch64" epoch="0" name="bpftool" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="bpftool" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>bpftool-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="src" epoch="0" name="kernel" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-18.an8.src.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-core" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-core" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-core-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-core" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-core" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-core-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-devel" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-devel-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-extra" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-extra-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-debug-modules-internal" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-internal-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-debug-modules-internal" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-debug-modules-internal-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-devel" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-devel" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-devel-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-headers" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-headers" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-headers-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-extra" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-extra-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-modules-internal" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-modules-internal-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="kernel-tools-libs-devel" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>kernel-tools-libs-devel-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="perf" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="perf" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>perf-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
      <package arch="aarch64" epoch="0" name="python3-perf" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-18.an8.aarch64.rpm</filename>
      </package>
      <package arch="x86_64" epoch="0" name="python3-perf" version="5.10.134" release="18.an8" repo="kernel-5.10" src="">
        <filename>python3-perf-5.10.134-18.an8.x86_64.rpm</filename>
      </package>
    </collection>
  </pkglist>
</update>
</updates>
