Поиск уязвимостей
Количество 33
Количество 33
CVE-2024-42265
In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mispredictions both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed. That's wrong for the same reasons why it's wrong in close_fd()/file_close_fd_locked(); the same solution applies - array_index_nospec(fd, fdt->max_fds) could differ from fd only in case of speculative execution on mispredicted path.
CVE-2024-42265
In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mispredictions both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed. That's wrong for the same reasons why it's wrong in close_fd()/file_close_fd_locked(); the same solution applies - array_index_nospec(fd, fdt->max_fds) could differ from fd only in case of speculative execution on mispredicted path.
CVE-2024-42265
In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mispredictions both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed. That's wrong for the same reasons why it's wrong in close_fd()/file_close_fd_locked(); the same solution applies - array_index_nospec(fd, fdt->max_fds) could differ from fd only in case of speculative execution on mispredicted path.
CVE-2024-42265
In the Linux kernel, the following vulnerability has been resolved: p ...
GHSA-9v94-8833-hv33
In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mispredictions both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed. That's wrong for the same reasons why it's wrong in close_fd()/file_close_fd_locked(); the same solution applies - array_index_nospec(fd, fdt->max_fds) could differ from fd only in case of speculative execution on mispredicted path.
BDU:2025-01434
Уязвимость компонентов fs/file ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2025:03310-1
Security update for the Linux Kernel
SUSE-SU-2025:02849-1
Security update for the Linux Kernel
SUSE-SU-2025:03344-1
Security update for the Linux Kernel
ALT-PU-2024-17921
ALT-PU-2024-17921: package `kernel-image-pine` update to version 6.10.4-alt1
ROS-20250130-03
Множественные уязвимости kernel-lt
SUSE-SU-2024:3591-1
Security update for the Linux Kernel
SUSE-SU-2024:3559-1
Security update for the Linux Kernel
ELSA-2024-12782
ELSA-2024-12782: Unbreakable Enterprise kernel-container security update (IMPORTANT)
ELSA-2024-12780
ELSA-2024-12780: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2024-12868
ELSA-2024-12868: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2024:3566-1
Security update for the Linux Kernel
ALT-PU-2024-12232
ALT-PU-2024-12232: package `kernel-image-rt` update to version 5.10.224-alt1.rt116
ALT-PU-2024-11345
ALT-PU-2024-11345: package `kernel-image-std-def` update to version 5.10.224-alt1
SUSE-SU-2024:3592-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-42265 In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mispredictions both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed. That's wrong for the same reasons why it's wrong in close_fd()/file_close_fd_locked(); the same solution applies - array_index_nospec(fd, fdt->max_fds) could differ from fd only in case of speculative execution on mispredicted path. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
 | CVE-2024-42265 In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mispredictions both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed. That's wrong for the same reasons why it's wrong in close_fd()/file_close_fd_locked(); the same solution applies - array_index_nospec(fd, fdt->max_fds) could differ from fd only in case of speculative execution on mispredicted path. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
 | CVE-2024-42265 In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mispredictions both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed. That's wrong for the same reasons why it's wrong in close_fd()/file_close_fd_locked(); the same solution applies - array_index_nospec(fd, fdt->max_fds) could differ from fd only in case of speculative execution on mispredicted path. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
| CVE-2024-42265 In the Linux kernel, the following vulnerability has been resolved: p ... | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
| GHSA-9v94-8833-hv33 In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mispredictions both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed. That's wrong for the same reasons why it's wrong in close_fd()/file_close_fd_locked(); the same solution applies - array_index_nospec(fd, fdt->max_fds) could differ from fd only in case of speculative execution on mispredicted path. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
 | BDU:2025-01434 Уязвимость компонентов fs/file ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | SUSE-SU-2025:03310-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:02849-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03344-1 Security update for the Linux Kernel | около 1 года назад | ||
| ALT-PU-2024-17921 ALT-PU-2024-17921: package `kernel-image-pine` update to version 6.10.4-alt1 | CVSS3: 7.8 | около 2 лет назад | |
 | ROS-20250130-03 Множественные уязвимости kernel-lt | CVSS3: 7.8 | почти 2 года назад | |
| SUSE-SU-2024:3591-1 Security update for the Linux Kernel | около 2 лет назад | ||
| SUSE-SU-2024:3559-1 Security update for the Linux Kernel | около 2 лет назад | ||
| ELSA-2024-12782 ELSA-2024-12782: Unbreakable Enterprise kernel-container security update (IMPORTANT) | около 2 лет назад | ||
| ELSA-2024-12780 ELSA-2024-12780: Unbreakable Enterprise kernel security update (IMPORTANT) | около 2 лет назад | ||
| ELSA-2024-12868 ELSA-2024-12868: Unbreakable Enterprise kernel security update (IMPORTANT) | почти 2 года назад | ||
| SUSE-SU-2024:3566-1 Security update for the Linux Kernel | около 2 лет назад | ||
| ALT-PU-2024-12232 ALT-PU-2024-12232: package `kernel-image-rt` update to version 5.10.224-alt1.rt116 | CVSS3: 7.8 | около 2 лет назад | |
| ALT-PU-2024-11345 ALT-PU-2024-11345: package `kernel-image-std-def` update to version 5.10.224-alt1 | CVSS3: 7.8 | около 2 лет назад | |
| SUSE-SU-2024:3592-1 Security update for the Linux Kernel | около 2 лет назад |
Уязвимостей на страницу