Поиск уязвимостей

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit 3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81.

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit 3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81.

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit 3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81.

Use-after-free in Linux kernel's net/sched: cls_u32 component

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u3 ...

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of the filter. This causes a problem when updating a filter bound to a class, as tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the still referenced class and allowing it to be deleted, leading to a use-after-free. We recommend upgrading past commit 3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81.

Уязвимость функции u32_init_knode() в модуле net/sched/cls_u32.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации или повысить свои привилегии

ELSA-2023-12970: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2023-7423: kernel security update (IMPORTANT)

Множественные уязвимости kernel-lt

ALT-PU-2023-8812: package `kernel-image-std-def` update to version 6.1.45-alt1

ALT-PU-2023-8697: package `kernel-image-pine` update to version 6.4.10-alt1

ALT-PU-2023-4937: package `kernel-image-un-def` update to version 6.4.10-alt1

ALT-PU-2023-8474: package `kernel-image-std-def` update to version 5.10.191-alt1

ELSA-2023-6583: kernel security, bug fix, and enhancement update (IMPORTANT)

ELSA-2023-7077: kernel security, bug fix, and enhancement update (IMPORTANT)

ALT-PU-2023-8569: package `kernel-image-un-def` update to version 6.1.49-alt1

ALT-PU-2023-5182: package `kernel-image-mp` update to version 6.4.12-alt1

ALT-PU-2023-8591: package `kernel-image-rt` update to version 5.10.192-alt1.rt92

ALT-PU-2023-8725: package `kernel-image-rt` update to version 6.1.46-alt1.rt13