ALT-PU-2022-2232: package kernel-image-un-def update to version 5.18.11-alt1
Описание
This update upgrades kernel-image-un-def to version 5.18.11-alt1.
Устраненные уязвимости19
Связанные уязвимости
ALT-PU-2022-2256: package `kernel-image-mp` update to version 5.18.12-alt1
ALT-PU-2022-2248: package `kernel-image-un-def` update to version 5.15.54-alt1
ALT-PU-2022-2233: package `kernel-image-std-def` update to version 5.15.54-alt1
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.