Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-3477

Критический

ALT-PU-2021-3477: package kernel-image-rt update to version 5.10.78-alt1.rt56

Источник
errata.altlinux.org
Дата публикации
06.12.2021
Дата обновления
03.09.2026
Устраненные уязвимости
261

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades kernel-image-rt to version 5.10.78-alt1.rt56.

Устраненные уязвимости261

Связанные уязвимости

CVSS3: 8.8
altlinux
около 5 лет назад

ALT-PU-2021-2748: package `kernel-image-std-kvm` update to version 5.10.62-alt1

CVSS3: 8.8
altlinux
около 5 лет назад

ALT-PU-2021-2901: package `kernel-image-rt` update to version 5.10.65-alt1.rt53

CVSS3: 7.8
ubuntu
больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: avoid a use-after-free when BO init fails nouveau_bo_init() is backed by ttm_bo_init() and ferries its return code back to the caller. On failures, ttm_bo_init() invokes the provided destructor which should de-initialize and free the memory. Thus, when nouveau_bo_init() returns an error the gem object has already been released and the memory freed by nouveau_bo_del_ttm().

CVSS3: 5.5
redhat
больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: avoid a use-after-free when BO init fails nouveau_bo_init() is backed by ttm_bo_init() and ferries its return code back to the caller. On failures, ttm_bo_init() invokes the provided destructor which should de-initialize and free the memory. Thus, when nouveau_bo_init() returns an error the gem object has already been released and the memory freed by nouveau_bo_del_ttm().

CVSS3: 7.8
nvd
больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: avoid a use-after-free when BO init fails nouveau_bo_init() is backed by ttm_bo_init() and ferries its return code back to the caller. On failures, ttm_bo_init() invokes the provided destructor which should de-initialize and free the memory. Thus, when nouveau_bo_init() returns an error the gem object has already been released and the memory freed by nouveau_bo_del_ttm().