Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page() in tls_decrypt_done releases them, and we trigger a use-after-free in process_rx_list when we try to read from the partially-read skb.

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page() in tls_decrypt_done releases them, and we trigger a use-after-free in process_rx_list when we try to read from the partially-read skb.

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page() in tls_decrypt_done releases them, and we trigger a use-after-free in process_rx_list when we try to read from the partially-read skb.

net: tls: fix use-after-free with partial reads and async decrypt

In the Linux kernel, the following vulnerability has been resolved: n ...

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page() in tls_decrypt_done releases them, and we trigger a use-after-free in process_rx_list when we try to read from the partially-read skb.

Уязвимость функции tls_decrypt_done() модуля net/tls/tls_sw.c реализации протокола TLS (Transport Layer Security) ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Множественные уязвимости kernel-lt

ELSA-2024-2394: kernel security, bug fix, and enhancement update (IMPORTANT)

ALT-PU-2024-2868: package `kernel-image-un-def` update to version 6.1.79-alt1

ALT-PU-2024-18361: package `kernel-image-std-def` update to version 6.1.79-alt1

ALT-PU-2024-3144: package `kernel-image-rt` update to version 6.1.79-alt1.rt25

ALT-PU-2024-18464: package `kernel-image-un-def` update to version 6.6.18-alt1

ALT-PU-2024-18207: package `kernel-image-pine` update to version 6.6.18-alt1

ALT-PU-2024-3415: package `kernel-image-mp` update to version 6.7.8-alt1

ALT-PU-2024-6818: package `kernel-image-rpi-un` update to version 6.6.23-alt1

ALT-PU-2024-14046: package `kernel-image-rpi-un` update to version 6.6.56-alt1