Поиск уязвимостей
Количество 29
Количество 29
BDU:2025-10773
Уязвимость функции sk_is_readable() ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на доступность защищаемой информации
ROS-20260304-80-0009
Уязвимость kernel-lt
ROS-20260304-73-0006
Уязвимость kernel-lt
CVE-2025-38112
In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a valid function pointer when sk resides in a sockmap. After the last sk_psock_put() (which usually happens when socket is removed from sockmap), sk->sk_prot gets restored and sk->sk_prot->sock_is_readable becomes NULL. This makes sk_is_readable() racy, if the value of sk->sk_prot is reloaded after the initial check. Which in turn may lead to a null pointer dereference. Ensure the function pointer does not turn NULL after the check.
CVE-2025-38112
In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a valid function pointer when sk resides in a sockmap. After the last sk_psock_put() (which usually happens when socket is removed from sockmap), sk->sk_prot gets restored and sk->sk_prot->sock_is_readable becomes NULL. This makes sk_is_readable() racy, if the value of sk->sk_prot is reloaded after the initial check. Which in turn may lead to a null pointer dereference. Ensure the function pointer does not turn NULL after the check.
CVE-2025-38112
In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a valid function pointer when sk resides in a sockmap. After the last sk_psock_put() (which usually happens when socket is removed from sockmap), sk->sk_prot gets restored and sk->sk_prot->sock_is_readable becomes NULL. This makes sk_is_readable() racy, if the value of sk->sk_prot is reloaded after the initial check. Which in turn may lead to a null pointer dereference. Ensure the function pointer does not turn NULL after the check.
CVE-2025-38112
net: Fix TOCTOU issue in sk_is_readable()
CVE-2025-38112
In the Linux kernel, the following vulnerability has been resolved: n ...
GHSA-4mp8-c9w5-ff64
In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a valid function pointer when sk resides in a sockmap. After the last sk_psock_put() (which usually happens when socket is removed from sockmap), sk->sk_prot gets restored and sk->sk_prot->sock_is_readable becomes NULL. This makes sk_is_readable() racy, if the value of sk->sk_prot is reloaded after the initial check. Which in turn may lead to a null pointer dereference. Ensure the function pointer does not turn NULL after the check.
ALT-PU-2025-16617
ALT-PU-2025-16617: package `kernel-image-rt` update to version 5.10.239-alt1.rt133
ALT-PU-2025-16605
ALT-PU-2025-16605: package `kernel-image-std-def` update to version 5.10.240-alt1
ALT-PU-2025-16596
ALT-PU-2025-16596: package `kernel-image-un-def` update to version 6.1.144-alt1
ALT-PU-2025-8297
ALT-PU-2025-8297: package `kernel-image-6.12` update to version 6.12.34-alt1
ALT-PU-2025-8293
ALT-PU-2025-8293: package `kernel-image-rt` update to version 6.12.34-alt1
SUSE-SU-2025:02846-1
Security update for the Linux Kernel
ALT-PU-2026-1529
ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1
ELSA-2025-20552
ELSA-2025-20552: Unbreakable Enterprise kernel security update (IMPORTANT)
ALT-PU-2025-12647
ALT-PU-2025-12647: package `kernel-image-rpi-un` update to version 6.12.49-alt1
SUSE-SU-2025:03023-1
Security update for the Linux Kernel
SUSE-SU-2025:02996-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
BDU:2025-10773 Уязвимость функции sk_is_readable() ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на доступность защищаемой информации | CVSS3: 5.7 | 0% Низкий | больше 1 года назад | |
ROS-20260304-80-0009 Уязвимость kernel-lt | CVSS3: 5.7 | 0% Низкий | 8 месяцев назад | |
ROS-20260304-73-0006 Уязвимость kernel-lt | CVSS3: 5.7 | 0% Низкий | 8 месяцев назад | |
CVE-2025-38112 In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a valid function pointer when sk resides in a sockmap. After the last sk_psock_put() (which usually happens when socket is removed from sockmap), sk->sk_prot gets restored and sk->sk_prot->sock_is_readable becomes NULL. This makes sk_is_readable() racy, if the value of sk->sk_prot is reloaded after the initial check. Which in turn may lead to a null pointer dereference. Ensure the function pointer does not turn NULL after the check. | CVSS3: 4.7 | 0% Низкий | больше 1 года назад | |
CVE-2025-38112 In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a valid function pointer when sk resides in a sockmap. After the last sk_psock_put() (which usually happens when socket is removed from sockmap), sk->sk_prot gets restored and sk->sk_prot->sock_is_readable becomes NULL. This makes sk_is_readable() racy, if the value of sk->sk_prot is reloaded after the initial check. Which in turn may lead to a null pointer dereference. Ensure the function pointer does not turn NULL after the check. | CVSS3: 4.7 | 0% Низкий | больше 1 года назад | |
CVE-2025-38112 In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a valid function pointer when sk resides in a sockmap. After the last sk_psock_put() (which usually happens when socket is removed from sockmap), sk->sk_prot gets restored and sk->sk_prot->sock_is_readable becomes NULL. This makes sk_is_readable() racy, if the value of sk->sk_prot is reloaded after the initial check. Which in turn may lead to a null pointer dereference. Ensure the function pointer does not turn NULL after the check. | CVSS3: 4.7 | 0% Низкий | больше 1 года назад | |
CVE-2025-38112 net: Fix TOCTOU issue in sk_is_readable() | CVSS3: 4.7 | 0% Низкий | больше 1 года назад | |
CVE-2025-38112 In the Linux kernel, the following vulnerability has been resolved: n ... | CVSS3: 4.7 | 0% Низкий | больше 1 года назад | |
GHSA-4mp8-c9w5-ff64 In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a valid function pointer when sk resides in a sockmap. After the last sk_psock_put() (which usually happens when socket is removed from sockmap), sk->sk_prot gets restored and sk->sk_prot->sock_is_readable becomes NULL. This makes sk_is_readable() racy, if the value of sk->sk_prot is reloaded after the initial check. Which in turn may lead to a null pointer dereference. Ensure the function pointer does not turn NULL after the check. | CVSS3: 4.7 | 0% Низкий | больше 1 года назад | |
ALT-PU-2025-16617 ALT-PU-2025-16617: package `kernel-image-rt` update to version 5.10.239-alt1.rt133 | CVSS3: 8 | больше 1 года назад | ||
ALT-PU-2025-16605 ALT-PU-2025-16605: package `kernel-image-std-def` update to version 5.10.240-alt1 | CVSS3: 8 | больше 1 года назад | ||
ALT-PU-2025-16596 ALT-PU-2025-16596: package `kernel-image-un-def` update to version 6.1.144-alt1 | CVSS3: 9.3 | больше 1 года назад | ||
ALT-PU-2025-8297 ALT-PU-2025-8297: package `kernel-image-6.12` update to version 6.12.34-alt1 | CVSS3: 8 | больше 1 года назад | ||
ALT-PU-2025-8293 ALT-PU-2025-8293: package `kernel-image-rt` update to version 6.12.34-alt1 | CVSS3: 8.8 | больше 1 года назад | ||
SUSE-SU-2025:02846-1 Security update for the Linux Kernel | около 1 года назад | |||
ALT-PU-2026-1529 ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1 | CVSS3: 9.8 | 10 месяцев назад | ||
ELSA-2025-20552 ELSA-2025-20552: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 года назад | |||
ALT-PU-2025-12647 ALT-PU-2025-12647: package `kernel-image-rpi-un` update to version 6.12.49-alt1 | CVSS3: 9.8 | около 1 года назад | ||
SUSE-SU-2025:03023-1 Security update for the Linux Kernel | около 1 года назад | |||
SUSE-SU-2025:02996-1 Security update for the Linux Kernel | около 1 года назад |
Уязвимостей на страницу