Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memory leak during stateful obj update stateful objects can be updated from the control plane. The transaction logic allocates a temporary object for this purpose. The ->init function was called for this object, so plain kfree() leaks resources. We must call ->destroy function of the object. nft_obj_destroy does this, but it also decrements the module refcount, but the update path doesn't increment it. To avoid special-casing the update object release, do module_get for the update case too and release it via nft_obj_destroy().

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memory leak during stateful obj update stateful objects can be updated from the control plane. The transaction logic allocates a temporary object for this purpose. The ->init function was called for this object, so plain kfree() leaks resources. We must call ->destroy function of the object. nft_obj_destroy does this, but it also decrements the module refcount, but the update path doesn't increment it. To avoid special-casing the update object release, do module_get for the update case too and release it via nft_obj_destroy().

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memory leak during stateful obj update stateful objects can be updated from the control plane. The transaction logic allocates a temporary object for this purpose. The ->init function was called for this object, so plain kfree() leaks resources. We must call ->destroy function of the object. nft_obj_destroy does this, but it also decrements the module refcount, but the update path doesn't increment it. To avoid special-casing the update object release, do module_get for the update case too and release it via nft_obj_destroy().

In the Linux kernel, the following vulnerability has been resolved: n ...

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memory leak during stateful obj update stateful objects can be updated from the control plane. The transaction logic allocates a temporary object for this purpose. The ->init function was called for this object, so plain kfree() leaks resources. We must call ->destroy function of the object. nft_obj_destroy does this, but it also decrements the module refcount, but the update path doesn't increment it. To avoid special-casing the update object release, do module_get for the update case too and release it via nft_obj_destroy().

Уязвимость компонента netfilter ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Security update for the Linux Kernel

ALT-PU-2022-1424: package `kernel-image-std-def` update to version 5.15.26-alt1

ALT-PU-2022-1425: package `kernel-image-un-def` update to version 5.16.12-alt1

Security update for the Linux Kernel

Множественные уязвимости kernel-lt

ALT-PU-2022-1511: package `kernel-image-rpi-un` update to version 5.15.28-alt1

ALT-PU-2022-1630: package `kernel-image-std-kvm` update to version 5.10.109-alt1

ALT-PU-2022-1611: package `kernel-image-std-def` update to version 5.10.109-alt1

ALT-PU-2022-1462: package `kernel-image-rt` update to version 5.10.104-alt1.rt63

ALT-PU-2022-1461: package `kernel-image-rt` update to version 5.10.104-alt1.rt63

ALT-PU-2022-1633: package `kernel-image-un-def` update to version 5.15.32-alt1

ALT-PU-2022-1456: package `kernel-image-mp` update to version 5.16.12-alt1

ALT-PU-2022-1540: package `kernel-image-rpi-un` update to version 5.15.28-alt1

ALT-PU-2022-1746: package `kernel-image-rpi-def` update to version 5.15.33-alt1