Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar to the one addressed by commit 20eb4f29b602 ("net: fix sk_page_frag() recursion from memory reclaim"). Here the nested access to the task page frag is caused by a page fault on the (mmapped) user-space memory buffer coming from the cifs file. The page fault handler performs an smb transaction on a different socket, inside the same process context. Since sk->sk_allaction for such socket does not prevent the usage for the task_frag, the nested allocation modify "under the hood" the page frag in use by the outer sendmsg call, corrupting the stream. The overall relevant stack trace looks like the following: httpd 78268 [001] 3461630.850950: probe:tcp_sendmsg_locked: ffffffff91461d91 tcp_se...

In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar to the one addressed by commit 20eb4f29b602 ("net: fix sk_page_frag() recursion from memory reclaim"). Here the nested access to the task page frag is caused by a page fault on the (mmapped) user-space memory buffer coming from the cifs file. The page fault handler performs an smb transaction on a different socket, inside the same process context. Since sk->sk_allaction for such socket does not prevent the usage for the task_frag, the nested allocation modify "under the hood" the page frag in use by the outer sendmsg call, corrupting the stream. The overall relevant stack trace looks like the following: httpd 78268 [001] 3461630.850950: probe:tcp_sendmsg_locked: ffffffff91461d91 tcp_se...

In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar to the one addressed by commit 20eb4f29b602 ("net: fix sk_page_frag() recursion from memory reclaim"). Here the nested access to the task page frag is caused by a page fault on the (mmapped) user-space memory buffer coming from the cifs file. The page fault handler performs an smb transaction on a different socket, inside the same process context. Since sk->sk_allaction for such socket does not prevent the usage for the task_frag, the nested allocation modify "under the hood" the page frag in use by the outer sendmsg call, corrupting the stream. The overall relevant stack trace looks like the following: httpd 78268 [001] 3461630.850950: probe:tcp_sendmsg_locked: ffffffff9146

In the Linux kernel, the following vulnerability has been resolved: t ...

Уязвимость компонентов tcp ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

ALT-PU-2021-5012: package `kernel-image-std-def` update to version 5.10.84-alt1

ALT-PU-2021-3527: package `kernel-image-std-def` update to version 5.10.84-alt1

Множественные уязвимости kernel-lt

ALT-PU-2021-3554: package `kernel-image-un-def` update to version 5.15.10-alt1

Security update for the Linux Kernel

ALT-PU-2021-4943: package `kernel-image-std-kvm` update to version 5.10.85-alt1

Security update for the Linux Kernel

ALT-PU-2021-3618: package `kernel-image-rt` update to version 5.10.87-alt1.rt59

Security update for the Linux Kernel

ALT-PU-2021-4935: package `kernel-image-mp` update to version 5.15.8-alt1

ALT-PU-2022-1016: package `kernel-image-rpi-un` update to version 5.15.13-alt1

ALT-PU-2022-1015: package `kernel-image-rpi-un` update to version 5.15.13-alt1

ALT-PU-2021-3660: package `kernel-image-un-def` update to version 5.15.11-alt2

Security update for the Linux Kernel

ALT-PU-2022-1428: package `kernel-image-rt` update to version 5.10.100-alt1.rt62