ALT-PU-2022-2621

Критический

ALT-PU-2022-2621: package kernel-image-un-def update to version 5.19.9-alt1

Источник

errata.altlinux.org

Дата публикации

15.09.2022

Дата обновления

19.03.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades kernel-image-un-def to version 5.19.9-alt1.

Устраненные уязвимости48

BDU:2022-05654

Высокий 8

Дата публикации: 12.09.2022

Уязвимость компонента drivers/firmware/efi/capsule-loader.c ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии или вызвать отказ в обслуживании

CVSS 3.1

Высокий 8

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Критический 9

AV:N/AC:L/Au:S/C:C/I:C/A:C

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Ссылки

BDU:2022-05654 https://bdu.fstec.ru/vul/2022-05654

Ссылки1

ALT-PU-2022-2621 https://errata.altlinux.org/ALT-PU-2022-2621

Связанные уязвимости

ALT-PU-2022-2691

CVSS3: 9.8

altlinux

около 4 лет назад

ALT-PU-2022-2691: package `kernel-image-mp` update to version 5.19.12-alt1

CVE-2022-40307

CVSS3: 4.7

ubuntu

около 4 лет назад

An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.

CVE-2022-40307

CVSS3: 4.7

redhat

около 4 лет назад

An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.

CVE-2022-40307

CVSS3: 4.7

nvd

около 4 лет назад

An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.

CVE-2022-40307

CVSS3: 4.7

msrc

около 4 лет назад

An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.