Описание
It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.
Ссылки
- Third Party Advisory
- Mailing ListPatch
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Mailing List
- Third Party Advisory
- Mailing ListPatch
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Mailing List
Уязвимые конфигурации
Конфигурация 1Версия от 5.7 (включая) до 5.10.137 (исключая)Версия от 5.11 (включая) до 5.15.61 (исключая)Версия от 5.16 (включая) до 5.18.18 (исключая)Версия от 5.19 (включая) до 5.19.2 (исключая)
Одно из
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*
EPSS
Процентиль: 66%
0.00532
Низкий
5.3 Medium
CVSS3
7.8 High
CVSS3
Дефекты
CWE-416
CWE-416
Связанные уязвимости
CVSS3: 5.3
ubuntu
больше 1 года назад
It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.
CVSS3: 7.8
redhat
около 3 лет назад
It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.
CVSS3: 5.3
debian
больше 1 года назад
It was discovered that when exec'ing from a non-leader thread, armed P ...
CVSS3: 7.8
fstec
около 3 лет назад
Уязвимость компонента POSIX CPU ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код
EPSS
Процентиль: 66%
0.00532
Низкий
5.3 Medium
CVSS3
7.8 High
CVSS3
Дефекты
CWE-416
CWE-416