Поиск уязвимостей

A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When route4_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8.

A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When route4_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8.

A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When route4_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8.

Use-after-free in Linux kernel's net/sched: cls_route component

A use-after-free vulnerability in the Linux kernel's net/sched: cls_ro ...

A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When route4_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8.

Уязвимость функции route4_change() в модуле net/sched/cls_route.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации или повысить свои привилегии

ELSA-2023-7423: kernel security update (IMPORTANT)

ELSA-2023-12842: Unbreakable Enterprise kernel security update (IMPORTANT)

Множественные уязвимости kernel-lt

ALT-PU-2023-8812: package `kernel-image-std-def` update to version 6.1.45-alt1

ALT-PU-2023-8697: package `kernel-image-pine` update to version 6.4.10-alt1

ALT-PU-2023-4937: package `kernel-image-un-def` update to version 6.4.10-alt1

ALT-PU-2023-8474: package `kernel-image-std-def` update to version 5.10.191-alt1

ELSA-2023-6583: kernel security, bug fix, and enhancement update (IMPORTANT)

ELSA-2023-7077: kernel security, bug fix, and enhancement update (IMPORTANT)

ALT-PU-2023-8569: package `kernel-image-un-def` update to version 6.1.49-alt1

ALT-PU-2023-5182: package `kernel-image-mp` update to version 6.4.12-alt1

ALT-PU-2023-8591: package `kernel-image-rt` update to version 5.10.192-alt1.rt92

ALT-PU-2023-8725: package `kernel-image-rt` update to version 6.1.46-alt1.rt13