ALT-PU-2023-8582: package kernel-image-std-def update to version 5.10.194-alt1
Описание
This update upgrades kernel-image-std-def to version 5.10.194-alt1.
Устраненные уязвимости36
Связанные уязвимости
ALT-PU-2023-8591: package `kernel-image-rt` update to version 5.10.192-alt1.rt92
ALT-PU-2023-8814: package `kernel-image-std-def` update to version 6.1.47-alt1
ALT-PU-2023-8885: package `kernel-image-un-def` update to version 6.4.12-alt1
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents).
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.