Поиск уязвимостей

Уязвимость функция nft_set_elem_init файла net/netfilter/nf_tables_api.c компонента User Namespace Handler ядра операционной системы Linux, позволяющая нарушителю получить root доступ

ALT-PU-2022-2288: package `kernel-image-centos` update to version 5.14.0.135-alt1.el9

ALT-PU-2022-2250: package `kernel-image-std-def` update to version 5.10.130-alt1

Множественные уязвимости ядра ОС

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges a different vulnerability than CVE-2022-32250. (The attacker can obtain root access but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

An issue was discovered in the Linux kernel through 5.18.9. A type con ...

ALT-PU-2022-2232: package `kernel-image-un-def` update to version 5.18.11-alt1

ALT-PU-2022-2265: package `kernel-image-std-kvm` update to version 5.10.130-alt1

ALT-PU-2022-2248: package `kernel-image-un-def` update to version 5.15.54-alt1

ALT-PU-2022-2233: package `kernel-image-std-def` update to version 5.15.54-alt1

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

ALT-PU-2022-2256: package `kernel-image-mp` update to version 5.18.12-alt1

ELSA-2023-12591: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2023-12590: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2023-12588: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2022-6610: kernel security, bug fix, and enhancement update (IMPORTANT)

Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP3)