In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decode_cb_compound4res() does not have to perform arithmetic on the unsafe length value.

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decode_cb_compound4res() does not have to perform arithmetic on the unsafe length value.

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decode_cb_compound4res() does not have to perform arithmetic on the unsafe length value.

In the Linux kernel, the following vulnerability has been resolved: N ...

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decode_cb_compound4res() does not have to perform arithmetic on the unsafe length value.

Уязвимость функции decode_cb_compound4res() ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код.

Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

Security update for the Linux Kernel (Live Patch 63 for SLE 12 SP5)

Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5)

Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3)

Security update for the Linux Kernel (Live Patch 57 for SLE 12 SP5)

Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5)

Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5)

Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)

Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4)

Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)