Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-1137

Высокий

ALT-PU-2021-1137: package kernel-image-std-def update to version 5.4.92-alt1

Источник
errata.altlinux.org
Дата публикации
24.01.2021
Дата обновления
24.01.2021
Устраненные уязвимости
4

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades kernel-image-std-def to version 5.4.92-alt1.

Устраненные уязвимости4

Связанные уязвимости

CVSS3: 3.3
ubuntu
больше 5 лет назад

A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to confidentiality.

CVSS3: 3.8
redhat
почти 6 лет назад

A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to confidentiality.

CVSS3: 3.3
nvd
больше 5 лет назад

A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to confidentiality.

CVSS3: 3.3
debian
больше 5 лет назад

A flaw was found in the Linux kernel in versions before 5.4.92 in the ...

CVSS3: 7.5
ubuntu
больше 3 лет назад

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.