ALT-PU-2019-2700: package kernel-image-un-def update to version 5.2.15-alt1
Описание
This update upgrades kernel-image-un-def to version 5.2.15-alt1.
Устраненные уязвимости17
Связанные уязвимости
ALT-PU-2019-2701: package `kernel-image-std-def` update to version 4.19.73-alt1
ALT-PU-2019-2745: package `kernel-image-mp` update to version 5.2.16-alt1
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.