Поиск уязвимостей

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

A heap-based buffer overflow flaw was found in the way the legacy_pars ...

Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP3)

Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP2)

ELSA-2022-9029: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2022-9028: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2022-9025: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2022-9024: Unbreakable Enterprise kernel security update (IMPORTANT)

Уязвимость функции legacy_parse_param ядра операционной системы Linux, связанная с целочисленным переполнением, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP2)

Important: kernel-rt security and bug fix update

Important: kernel security and bug fix update

ELSA-2022-0188: kernel security and bug fix update (IMPORTANT)

ALT-PU-2022-1267: package `kernel-image-centos` update to version 5.14.0.59-alt1.el9

ALT-PU-2022-1138: package `kernel-image-std-def` update to version 5.10.93-alt1

ALT-PU-2022-1105: package `kernel-image-un-def` update to version 5.16.2-alt1

ALT-PU-2022-1104: package `kernel-image-std-def` update to version 5.10.93-alt1