ALT-PU-2023-8724: package kernel-image-rt update to version 6.1.38-alt1.rt12
Описание
This update upgrades kernel-image-rt to version 6.1.38-alt1.rt12.
Устраненные уязвимости26
Связанные уязвимости
ALT-PU-2023-8802: package `kernel-image-std-def` update to version 6.1.34-alt1
ALT-PU-2023-1995: package `kernel-image-un-def` update to version 6.3.8-alt1
An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of `NameOffset` in the `parse_lease_state()` function, the `create_context` object can access invalid memory.
An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of `NameOffset` in the `parse_lease_state()` function, the `create_context` object can access invalid memory.
An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of `NameOffset` in the `parse_lease_state()` function, the `create_context` object can access invalid memory.