ALT-PU-2023-8565: package kernel-image-un-def update to version 6.1.35-alt1
Описание
This update upgrades kernel-image-un-def to version 6.1.35-alt1.
Устраненные уязвимости6
Связанные уязвимости
ALT-PU-2023-8874: package `kernel-image-un-def` update to version 6.3.9-alt1
ALT-PU-2023-8803: package `kernel-image-std-def` update to version 6.1.35-alt1
ALT-PU-2023-8658: package `kernel-image-mp` update to version 6.3.12-alt1
ALT-PU-2023-8724: package `kernel-image-rt` update to version 6.1.38-alt1.rt12
A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue. We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97