Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-5182

Высокий

ALT-PU-2023-5182: package kernel-image-mp update to version 6.4.12-alt1

Источник
errata.altlinux.org
Дата публикации
26.08.2023
Дата обновления
24.10.2026
Устраненные уязвимости
141

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades kernel-image-mp to version 6.4.12-alt1.

Устраненные уязвимости141

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 3 лет назад

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.

CVSS3: 5.5
redhat
больше 3 лет назад

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.

CVSS3: 7.8
nvd
около 3 лет назад

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.

CVSS3: 7.8
debian
около 3 лет назад

The fix for XSA-423 added logic to Linux'es netback driver to deal wit ...

CVSS3: 7.8
altlinux
около 3 лет назад

ALT-PU-2023-8569: package `kernel-image-un-def` update to version 6.1.49-alt1