Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices(). Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.

In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices(). Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.

In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices(). Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.

In the Linux kernel, the following vulnerability has been resolved: p ...

In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices(). Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.

Уязвимость функции wmi_char_open() ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании

Important: kernel security update

ELSA-2024-5363: kernel security update (IMPORTANT)

ALT-PU-2023-8594: package `kernel-image-rt` update to version 5.10.201-alt1.rt98

Множественные уязвимости kernel-lt

ALT-PU-2023-7415: package `kernel-image-std-def` update to version 6.1.63-alt1

ALT-PU-2023-7413: package `kernel-image-un-def` update to version 6.1.63-alt1

ALT-PU-2023-7414: package `kernel-image-un-def` update to version 6.5.12-alt1

ALT-PU-2023-8699: package `kernel-image-pine` update to version 6.6.2-alt1

ALT-PU-2023-7472: package `kernel-image-mp` update to version 6.5.12-alt1

ALT-PU-2023-7921: package `kernel-image-std-def` update to version 5.10.203-alt1

Important: kernel security update

ELSA-2024-5101: kernel security update (IMPORTANT)

Security update for the Linux Kernel

ALT-PU-2023-7750: package `kernel-image-rt` update to version 6.1.64-alt1.rt17