Поиск уязвимостей
Количество 25
Количество 25
CVE-2024-26950
In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.
CVE-2024-26950
In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.
CVE-2024-26950
In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.
CVE-2024-26950
CVE-2024-26950
In the Linux kernel, the following vulnerability has been resolved: w ...
GHSA-265f-v3vf-6m77
In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.
BDU:2024-09397
Уязвимость компонента wireguard ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20241031-01
Множественные уязвимости kernel-lt
ALT-PU-2024-18366
ALT-PU-2024-18366: package `kernel-image-std-def` update to version 6.1.84-alt1
ALT-PU-2024-18059
ALT-PU-2024-18059: package `kernel-image-un-def` update to version 6.1.84-alt1
ALT-PU-2024-18470
ALT-PU-2024-18470: package `kernel-image-un-def` update to version 6.6.24-alt1
ALT-PU-2024-18142
ALT-PU-2024-18142: package `kernel-image-6.8` update to version 6.8.3-alt1
SUSE-SU-2024:1644-1
Security update for the Linux Kernel
SUSE-SU-2024:1659-1
Security update for the Linux Kernel
SUSE-SU-2024:1663-1
Security update for the Linux Kernel
ALT-PU-2024-18077
ALT-PU-2024-18077: package `kernel-image-rt` update to version 5.10.215-alt1.rt107
ALT-PU-2024-18212
ALT-PU-2024-18212: package `kernel-image-pine` update to version 6.6.27-alt1
ALT-PU-2024-7511
ALT-PU-2024-7511: package `kernel-image-std-def` update to version 5.10.216-alt1
ALT-PU-2024-7646
ALT-PU-2024-7646: package `kernel-image-rt` update to version 6.1.90-alt1.rt30
SUSE-SU-2024:2203-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-26950 In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-26950 In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers. | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-26950 In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
 | CVSS3: 5.5 | 0% Низкий | около 2 лет назад | |
| CVE-2024-26950 In the Linux kernel, the following vulnerability has been resolved: w ... | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
| GHSA-265f-v3vf-6m77 In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers. | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | BDU:2024-09397 Уязвимость компонента wireguard ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | ROS-20241031-01 Множественные уязвимости kernel-lt | CVSS3: 8.8 | около 2 лет назад | |
| ALT-PU-2024-18366 ALT-PU-2024-18366: package `kernel-image-std-def` update to version 6.1.84-alt1 | CVSS3: 8.8 | больше 2 лет назад | |
| ALT-PU-2024-18059 ALT-PU-2024-18059: package `kernel-image-un-def` update to version 6.1.84-alt1 | CVSS3: 8.8 | больше 2 лет назад | |
| ALT-PU-2024-18470 ALT-PU-2024-18470: package `kernel-image-un-def` update to version 6.6.24-alt1 | CVSS3: 8.8 | больше 2 лет назад | |
| ALT-PU-2024-18142 ALT-PU-2024-18142: package `kernel-image-6.8` update to version 6.8.3-alt1 | CVSS3: 8.8 | больше 2 лет назад | |
 | SUSE-SU-2024:1644-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| SUSE-SU-2024:1659-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| SUSE-SU-2024:1663-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| ALT-PU-2024-18077 ALT-PU-2024-18077: package `kernel-image-rt` update to version 5.10.215-alt1.rt107 | CVSS3: 9.1 | больше 2 лет назад | |
| ALT-PU-2024-18212 ALT-PU-2024-18212: package `kernel-image-pine` update to version 6.6.27-alt1 | CVSS3: 9.8 | больше 2 лет назад | |
| ALT-PU-2024-7511 ALT-PU-2024-7511: package `kernel-image-std-def` update to version 5.10.216-alt1 | CVSS3: 9.1 | больше 2 лет назад | |
| ALT-PU-2024-7646 ALT-PU-2024-7646: package `kernel-image-rt` update to version 6.1.90-alt1.rt30 | CVSS3: 9.8 | больше 2 лет назад | |
| SUSE-SU-2024:2203-1 Security update for the Linux Kernel | больше 2 лет назад |
Уязвимостей на страницу