Поиск уязвимостей

Уязвимость функции u32_set_parms() в модуле net/sched/cls_u32.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность данных

ALT-PU-2023-8874: package `kernel-image-un-def` update to version 6.3.9-alt1

ALT-PU-2023-8803: package `kernel-image-std-def` update to version 6.1.35-alt1

ALT-PU-2023-8565: package `kernel-image-un-def` update to version 6.1.35-alt1

ALT-PU-2023-4145: package `kernel-image-rt` update to version 5.10.186-alt1.rt91

ALT-PU-2023-8461: package `kernel-image-std-def` update to version 5.10.185-alt1

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

Use-after-free in Linux kernel's net/sched: cls_u32 component

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u3 ...

ALT-PU-2023-8658: package `kernel-image-mp` update to version 6.3.12-alt1

ALT-PU-2023-8724: package `kernel-image-rt` update to version 6.1.38-alt1.rt12

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5)

ELSA-2023-5622: kernel security and bug fix update (IMPORTANT)

Множественные уязвимости ядра ОС

Множественные уязвимости ядра ОС

Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1)