Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-10855

Высокий

ALT-PU-2024-10855: package kernel-image-pine update to version 6.10.3-alt2

Источник
errata.altlinux.org
Дата публикации
07.08.2024
Дата обновления
07.08.2024
Устраненные уязвимости
143

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades kernel-image-pine to version 6.10.3-alt2.

Устраненные уязвимости143

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 3 года назад

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translated into what Linux calls SKB fragments. Such converted request parts can, when for a particular SKB they are all of length zero, lead to a de-reference of NULL in core networking code.

CVSS3: 7.5
nvd
почти 3 года назад

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translated into what Linux calls SKB fragments. Such converted request parts can, when for a particular SKB they are all of length zero, lead to a de-reference of NULL in core networking code.

CVSS3: 7.5
msrc
9 месяцев назад

Linux: netback processing of zero-length transmit fragment

CVSS3: 7.5
debian
почти 3 года назад

Transmit requests in Xen's virtual network protocol can consist of mul ...

CVSS3: 7.5
github
почти 3 года назад

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translated into what Linux calls SKB fragments. Such converted request parts can, when for a particular SKB they are all of length zero, lead to a de-reference of NULL in core networking code.