Поиск уязвимостей

Уязвимость функции reserve_sfa_size() модуля openvswitch ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии или вызвать отказ в обслуживании

ALT-PU-2022-1797: package `kernel-image-un-def` update to version 5.17.5-alt1

ALT-PU-2022-1873: package `kernel-image-mp` update to version 5.17.8-alt1

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

An integer coercion error was found in the openvswitch kernel module. ...

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

ALT-PU-2022-1826: package `kernel-image-std-def` update to version 5.10.113-alt1

ALT-PU-2022-1853: package `kernel-image-un-def` update to version 5.15.37-alt1

ALT-PU-2022-1810: package `kernel-image-std-def` update to version 5.15.37-alt1

Множественные уязвимости ядра ОС

ALT-PU-2022-1830: package `kernel-image-rpi-def` update to version 5.15.36-alt1

ELSA-2022-10065: Unbreakable Enterprise kernel security update (IMPORTANT)

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

ALT-PU-2022-7823: package `kernel-image-xenomai` update to version 4.19.246-alt1.cip75.22

Security update for the Linux Kernel

ALT-PU-2022-1881: package `kernel-image-rt` update to version 5.10.115-alt1.rt67