ALT-PU-2023-8802: package kernel-image-std-def update to version 6.1.34-alt1
Описание
This update upgrades kernel-image-std-def to version 6.1.34-alt1.
Устраненные уязвимости8
Связанные уязвимости
ALT-PU-2023-1995: package `kernel-image-un-def` update to version 6.3.8-alt1
ALT-PU-2023-8564: package `kernel-image-un-def` update to version 6.1.34-alt1
ALT-PU-2023-8724: package `kernel-image-rt` update to version 6.1.38-alt1.rt12
ALT-PU-2023-1994: package `kernel-image-mp` update to version 6.3.8-alt1
An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of `NameOffset` in the `parse_lease_state()` function, the `create_context` object can access invalid memory.