Поиск уязвимостей

Уязвимость функции cond_list_destroy() (security/selinux/ss/conditional.c) ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

In the Linux kernel, the following vulnerability has been resolved: selinux: fix double free of cond_list on error paths On error path from cond_read_list() and duplicate_policydb_cond_list() the cond_list_destroy() gets called a second time in caller functions, resulting in NULL pointer deref. Fix this by resetting the cond_list_len to 0 in cond_list_destroy(), making subsequent calls a noop. Also consistently reset the cond_list pointer to NULL after freeing. [PM: fix line lengths in the description]

In the Linux kernel, the following vulnerability has been resolved: selinux: fix double free of cond_list on error paths On error path from cond_read_list() and duplicate_policydb_cond_list() the cond_list_destroy() gets called a second time in caller functions, resulting in NULL pointer deref. Fix this by resetting the cond_list_len to 0 in cond_list_destroy(), making subsequent calls a noop. Also consistently reset the cond_list pointer to NULL after freeing. [PM: fix line lengths in the description]

In the Linux kernel, the following vulnerability has been resolved: selinux: fix double free of cond_list on error paths On error path from cond_read_list() and duplicate_policydb_cond_list() the cond_list_destroy() gets called a second time in caller functions, resulting in NULL pointer deref. Fix this by resetting the cond_list_len to 0 in cond_list_destroy(), making subsequent calls a noop. Also consistently reset the cond_list pointer to NULL after freeing. [PM: fix line lengths in the description]

In the Linux kernel, the following vulnerability has been resolved: s ...

In the Linux kernel, the following vulnerability has been resolved: selinux: fix double free of cond_list on error paths On error path from cond_read_list() and duplicate_policydb_cond_list() the cond_list_destroy() gets called a second time in caller functions, resulting in NULL pointer deref. Fix this by resetting the cond_list_len to 0 in cond_list_destroy(), making subsequent calls a noop. Also consistently reset the cond_list pointer to NULL after freeing. [PM: fix line lengths in the description]

ALT-PU-2022-7798: package `kernel-image-std-def` update to version 5.10.99-alt1

ALT-PU-2022-1228: package `kernel-image-un-def` update to version 5.16.8-alt1

Множественные уязвимости kernel-lt

ALT-PU-2022-1297: package `kernel-image-std-def` update to version 5.10.100-alt1

ALT-PU-2022-1289: package `kernel-image-rt` update to version 5.10.100-alt1.rt62

ALT-PU-2022-1298: package `kernel-image-un-def` update to version 5.15.23-alt1

ALT-PU-2022-1239: package `kernel-image-mp` update to version 5.16.8-alt1

ALT-PU-2022-1432: package `kernel-image-std-kvm` update to version 5.10.102-alt1

ALT-PU-2022-1441: package `kernel-image-rpi-un` update to version 5.15.25-alt1

ALT-PU-2022-1540: package `kernel-image-rpi-un` update to version 5.15.28-alt1

ALT-PU-2022-1428: package `kernel-image-rt` update to version 5.10.100-alt1.rt62

ALT-PU-2022-1421: package `kernel-image-rpi-def` update to version 5.15.25-alt1

ALT-PU-2022-1419: package `kernel-image-rpi-def` update to version 5.15.25-alt1

Security update for the Linux Kernel