Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload, then copies one sockaddr_storage for every entry in transport_addr_list. After the wrap, a diagnostic dump reserves an empty payload and writes 8 MiB of peer addresses past the skb tail. Reject a new unique peer when transport_count has reached U16_MAX. Perform the check after the existing-peer lookup so a duplicate address continues to return its existing transport at the limit.

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload, then copies one sockaddr_storage for every entry in transport_addr_list. After the wrap, a diagnostic dump reserves an empty payload and writes 8 MiB of peer addresses past the skb tail. Reject a new unique peer when transport_count has reached U16_MAX. Perform the check after the existing-peer lookup so a duplicate address continues to return its existing transport at the limit.

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload, then copies one sockaddr_storage for every entry in transport_addr_list. After the wrap, a diagnostic dump reserves an empty payload and writes 8 MiB of peer addresses past the skb tail. Reject a new unique peer when transport_count has reached U16_MAX. Perform the check after the existing-peer lookup so a duplicate address continues to return its existing transport at the limit.

sctp: prevent peer transport count overflow

In the Linux kernel, the following vulnerability has been resolved: s ...

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload, then copies one sockaddr_storage for every entry in transport_addr_list. After the wrap, a diagnostic dump reserves an empty payload and writes 8 MiB of peer addresses past the skb tail. Reject a new unique peer when transport_count has reached U16_MAX. Perform the check after the existing-peer lookup so a duplicate address continues to return its existing transport at the limit.

Уязвимость функции sctp_assoc_add_peer() реализации протокола SCTP (Stream Control Transmission Protocol) ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии

Уязвимость kernel-lt

Уязвимость kernel-lt

Security update for the Linux Kernel (Live Patch 59 for SUSE Linux Enterprise 15 SP4)

ELSA-2026-500330: Unbreakable Enterprise kernel security update (IMPORTANT)

Security update for the Linux Kernel (Live Patch 87 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)