<?xml version="1.0" encoding="UTF-8"?>
<updates>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-HotPatchSA-2024-1001</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2024-03-06"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-4622" id="CVE-2023-4622" title="CVE-2023-4622" type="cve"></reference>
          </references>
          <description>A use-after-free vulnerability in the Linux kernel&#39;s af_unix component can be exploited to achieve local privilege escalation.The unix_stream_sendpage() function tries to add data to the last skb in the peer&#39;s recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.(CVE-2023-4622)</description>
          <pkglist>
               <hot_patch_collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="1" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-1.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="1" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-1.x86_64.rpm</filename>
                    </package>
               </hot_patch_collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-HotPatchSA-2024-1003</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2024-03-15"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-6931" id="CVE-2023-6931" title="CVE-2023-6931" type="cve"></reference>
          </references>
          <description>A heap out-of-bounds write vulnerability in the Linux kernel&#39;s Performance Events system component can be exploited to achieve local privilege escalation.A perf_event&#39;s read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.(CVE-2023-6931)</description>
          <pkglist>
               <hot_patch_collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="2" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-2.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="2" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-2.x86_64.rpm</filename>
                    </package>
               </hot_patch_collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-HotPatchSA-2024-1005</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2024-03-22"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-51043" id="CVE-2023-51043" title="CVE-2023-51043" type="cve"></reference>
          </references>
          <description>In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.(CVE-2023-51043)</description>
          <pkglist>
               <hot_patch_collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="3" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-3.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="3" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-3.x86_64.rpm</filename>
                    </package>
               </hot_patch_collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-HotPatchSA-2024-1006</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2024-03-29"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2024-1086" id="CVE-2024-1086" title="CVE-2024-1086" type="cve"></reference>
          </references>
          <description>A use-after-free vulnerability in the Linux kernel&#39;s netfilter: nf_tables component can be exploited to achieve local privilege escalation.The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.(CVE-2024-1086)</description>
          <pkglist>
               <hot_patch_collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="4" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-4.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="4" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-4.x86_64.rpm</filename>
                    </package>
               </hot_patch_collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-HotPatchSA-2024-1009</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2024-04-12"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2024-0841" id="CVE-2024-0841" title="CVE-2024-0841" type="cve"></reference>
          </references>
          <description>A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.(CVE-2024-0841)</description>
          <pkglist>
               <hot_patch_collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="5" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-5.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="5" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-5.x86_64.rpm</filename>
                    </package>
               </hot_patch_collection>
          </pkglist>
     </update>
     <update from="openeuler.org" type="security" status="stable">
          <id>openEuler-HotPatchSA-2024-1012</id>
          <title>An update for kernel is now available for openEuler-22.03-LTS-SP1</title>
          <severity>Important</severity>
          <release>openEuler</release>
          <issued date="2024-05-20"></issued>
          <references>
               <reference href="https://nvd.nist.gov/vuln/detail/CVE-2024-26885" id="CVE-2024-26885" title="CVE-2024-26885" type="cve"></reference>
          </references>
          <description>In the Linux kernel, the following vulnerability has been resolved:bpf: Fix DEVMAP_HASH overflow check on 32-bit archesThe devmap code allocates a number hash buckets equal to the next powerof two of the max_entries value provided when creating the map. Whenrounding up to the next power of two, the 32-bit variable storing thenumber of buckets can overflow, and the code checks for overflow bychecking if the truncated 32-bit value is equal to 0. However, on 32-bitarches the rounding up itself can overflow mid-way through, because itends up doing a left-shift of 32 bits on an unsigned long value. If thesize of an unsigned long is four bytes, this is undefined behaviour, sothere is no guarantee that we&#39;ll end up with a nice and tidy 0-value atthe end.Syzbot managed to turn this into a crash on arm32 by creating aDEVMAP_HASH with max_entries &gt; 0x80000000 and then trying to update it.Fix this by moving the overflow check to before the rounding upoperation.(CVE-2024-26885)</description>
          <pkglist>
               <hot_patch_collection>
                    <name>openEuler</name>
                    <package arch="aarch64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="6" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-6.aarch64.rpm</filename>
                    </package>
                    <package arch="x86_64" name="patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC" release="6" version="1">
                         <filename>patch-kernel-5.10.0-136.12.0.86.oe2203sp1-ACC-1-6.x86_64.rpm</filename>
                    </package>
               </hot_patch_collection>
          </pkglist>
     </update>
</updates>