Поиск уязвимостей
Количество 27
Количество 27
BDU:2024-09004
Уязвимость функции xenvif_flush_hash() ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации.
CVE-2024-49936
In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash() During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head->next after the entry becomes free. Therefore, to solve this, you need to change it to list_for_each_entry_safe.
CVE-2024-49936
In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash() During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head->next after the entry becomes free. Therefore, to solve this, you need to change it to list_for_each_entry_safe.
CVE-2024-49936
In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash() During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head->next after the entry becomes free. Therefore, to solve this, you need to change it to list_for_each_entry_safe.
CVE-2024-49936
net/xen-netback: prevent UAF in xenvif_flush_hash()
CVE-2024-49936
In the Linux kernel, the following vulnerability has been resolved: n ...
GHSA-vp2p-wqj6-25wf
In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash() During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head->next after the entry becomes free. Therefore, to solve this, you need to change it to list_for_each_entry_safe.
ROS-20250414-01
Множественные уязвимости kernel-lt
ALT-PU-2024-17944
ALT-PU-2024-17944: package `kernel-image-un-def` update to version 6.6.56-alt0.p11.1
ALT-PU-2024-14270
ALT-PU-2024-14270: package `kernel-image-std-def` update to version 5.10.227-alt1
ALT-PU-2024-16172
ALT-PU-2024-16172: package `kernel-image-rt` update to version 5.10.229-alt1.rt121
ALT-PU-2024-14268
ALT-PU-2024-14268: package `kernel-image-un-def` update to version 6.1.113-alt1
ALT-PU-2024-17924
ALT-PU-2024-17924: package `kernel-image-pine` update to version 6.10.14-alt1
SUSE-SU-2024:4103-1
Security update for the Linux Kernel
SUSE-SU-2024:4140-1
Security update for the Linux Kernel
SUSE-SU-2024:4131-1
Security update for the Linux Kernel
SUSE-SU-2025:0034-1
Security update for the Linux Kernel
SUSE-SU-2024:4100-1
Security update for the Linux Kernel
ALT-PU-2024-14046
ALT-PU-2024-14046: package `kernel-image-rpi-un` update to version 6.6.56-alt1
SUSE-SU-2024:3983-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-09004 Уязвимость функции xenvif_flush_hash() ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации. | CVSS3: 7.8 | 0% Низкий | около 2 лет назад |
 | CVE-2024-49936 In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash() During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head->next after the entry becomes free. Therefore, to solve this, you need to change it to list_for_each_entry_safe. | CVSS3: 7.8 | 0% Низкий | около 2 лет назад |
 | CVE-2024-49936 In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash() During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head->next after the entry becomes free. Therefore, to solve this, you need to change it to list_for_each_entry_safe. | CVSS3: 7.8 | 0% Низкий | около 2 лет назад |
 | CVE-2024-49936 In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash() During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head->next after the entry becomes free. Therefore, to solve this, you need to change it to list_for_each_entry_safe. | CVSS3: 7.8 | 0% Низкий | около 2 лет назад |
 | CVE-2024-49936 net/xen-netback: prevent UAF in xenvif_flush_hash() | 0% Низкий | 9 месяцев назад | |
| CVE-2024-49936 In the Linux kernel, the following vulnerability has been resolved: n ... | CVSS3: 7.8 | 0% Низкий | около 2 лет назад |
| GHSA-vp2p-wqj6-25wf In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash() During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head->next after the entry becomes free. Therefore, to solve this, you need to change it to list_for_each_entry_safe. | CVSS3: 7.8 | 0% Низкий | около 2 лет назад |
 | ROS-20250414-01 Множественные уязвимости kernel-lt | CVSS3: 7.8 | больше 1 года назад | |
| ALT-PU-2024-17944 ALT-PU-2024-17944: package `kernel-image-un-def` update to version 6.6.56-alt0.p11.1 | CVSS3: 7.8 | около 2 лет назад | |
| ALT-PU-2024-14270 ALT-PU-2024-14270: package `kernel-image-std-def` update to version 5.10.227-alt1 | CVSS3: 9.1 | около 2 лет назад | |
| ALT-PU-2024-16172 ALT-PU-2024-16172: package `kernel-image-rt` update to version 5.10.229-alt1.rt121 | CVSS3: 9.1 | почти 2 года назад | |
| ALT-PU-2024-14268 ALT-PU-2024-14268: package `kernel-image-un-def` update to version 6.1.113-alt1 | CVSS3: 9.1 | около 2 лет назад | |
| ALT-PU-2024-17924 ALT-PU-2024-17924: package `kernel-image-pine` update to version 6.10.14-alt1 | CVSS3: 9.1 | около 2 лет назад | |
 | SUSE-SU-2024:4103-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2024:4140-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2024:4131-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2025:0034-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2024:4100-1 Security update for the Linux Kernel | почти 2 года назад | ||
| ALT-PU-2024-14046 ALT-PU-2024-14046: package `kernel-image-rpi-un` update to version 6.6.56-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| SUSE-SU-2024:3983-1 Security update for the Linux Kernel | почти 2 года назад |
Уязвимостей на страницу