Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2024-12684

Опубликовано: 23 сент. 2024
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2024-12684: kernel security update (MODERATE)

[3.10.0-1160.119.1.0.4.el7.OL7]

  • fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi) [3.10.0-1160.119.1.0.4.el7.OL7]

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

bpftool

3.10.0-1160.119.1.0.4.el7

kernel

3.10.0-1160.119.1.0.4.el7

kernel-abi-whitelists

3.10.0-1160.119.1.0.4.el7

kernel-debug

3.10.0-1160.119.1.0.4.el7

kernel-debug-devel

3.10.0-1160.119.1.0.4.el7

kernel-devel

3.10.0-1160.119.1.0.4.el7

kernel-doc

3.10.0-1160.119.1.0.4.el7

kernel-headers

3.10.0-1160.119.1.0.4.el7

kernel-tools

3.10.0-1160.119.1.0.4.el7

kernel-tools-libs

3.10.0-1160.119.1.0.4.el7

kernel-tools-libs-devel

3.10.0-1160.119.1.0.4.el7

perf

3.10.0-1160.119.1.0.4.el7

python-perf

3.10.0-1160.119.1.0.4.el7

Связанные CVE

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 3 лет назад

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

CVSS3: 7
redhat
больше 3 лет назад

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

CVSS3: 7.8
nvd
больше 3 лет назад

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

CVSS3: 7.8
msrc
около 3 лет назад

Описание отсутствует

CVSS3: 7.8
debian
больше 3 лет назад

A use-after-free flaw was found in the Linux kernel\u2019s FUSE filesy ...