Поиск уязвимостей
Количество 22
Количество 22
CVE-2023-52974
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail.
CVE-2023-52974
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail.
CVE-2023-52974
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail.
CVE-2023-52974
In the Linux kernel, the following vulnerability has been resolved: s ...
GHSA-wqh7-68mq-r673
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail.
BDU:2025-06252
Уязвимость функции iscsi_sw_tcp_host_get_param() и iscsi_sw_tcp_session_create() ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2025:02099-1
Security update for the Linux Kernel
ROS-20250528-01
Множественные уязвимости kernel-lt
ALT-PU-2023-8788
ALT-PU-2023-8788: package `kernel-image-std-def` update to version 5.15.93-alt1
ALT-PU-2023-1278
ALT-PU-2023-1278: package `kernel-image-std-def` update to version 5.10.168-alt1
SUSE-SU-2025:1195-1
Security update for the Linux Kernel
ALT-PU-2023-1271
ALT-PU-2023-1271: package `kernel-image-un-def` update to version 5.15.94-alt1
ALT-PU-2023-1220
ALT-PU-2023-1220: package `kernel-image-un-def` update to version 6.1.11-alt1
ALT-PU-2023-1311
ALT-PU-2023-1311: package `kernel-image-rt` update to version 5.10.168-alt1.rt83
ALT-PU-2023-1309
ALT-PU-2023-1309: package `kernel-image-rt` update to version 5.10.168-alt1.rt83
ALT-PU-2023-1282
ALT-PU-2023-1282: package `kernel-image-std-kvm` update to version 5.10.168-alt1
ALT-PU-2023-1267
ALT-PU-2023-1267: package `kernel-image-mp` update to version 6.1.12-alt1
SUSE-SU-2025:1293-1
Security update for the Linux Kernel
SUSE-SU-2025:1263-1
Security update for the Linux Kernel
SUSE-SU-2025:1241-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-52974 In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail. | CVSS3: 7.8 | 0% Низкий | больше 1 года назад |
 | CVE-2023-52974 In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail. | CVSS3: 7 | 0% Низкий | больше 1 года назад |
 | CVE-2023-52974 In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail. | CVSS3: 7.8 | 0% Низкий | больше 1 года назад |
| CVE-2023-52974 In the Linux kernel, the following vulnerability has been resolved: s ... | CVSS3: 7.8 | 0% Низкий | больше 1 года назад |
| GHSA-wqh7-68mq-r673 In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail. | CVSS3: 7.8 | 0% Низкий | больше 1 года назад |
 | BDU:2025-06252 Уязвимость функции iscsi_sw_tcp_host_get_param() и iscsi_sw_tcp_session_create() ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.8 | 0% Низкий | почти 4 года назад |
 | SUSE-SU-2025:02099-1 Security update for the Linux Kernel | больше 1 года назад | ||
 | ROS-20250528-01 Множественные уязвимости kernel-lt | CVSS3: 7.8 | больше 1 года назад | |
| ALT-PU-2023-8788 ALT-PU-2023-8788: package `kernel-image-std-def` update to version 5.15.93-alt1 | CVSS3: 7.8 | больше 3 лет назад | |
| ALT-PU-2023-1278 ALT-PU-2023-1278: package `kernel-image-std-def` update to version 5.10.168-alt1 | CVSS3: 8.8 | больше 3 лет назад | |
| SUSE-SU-2025:1195-1 Security update for the Linux Kernel | больше 1 года назад | ||
| ALT-PU-2023-1271 ALT-PU-2023-1271: package `kernel-image-un-def` update to version 5.15.94-alt1 | CVSS3: 8.8 | больше 3 лет назад | |
| ALT-PU-2023-1220 ALT-PU-2023-1220: package `kernel-image-un-def` update to version 6.1.11-alt1 | CVSS3: 7.8 | больше 3 лет назад | |
| ALT-PU-2023-1311 ALT-PU-2023-1311: package `kernel-image-rt` update to version 5.10.168-alt1.rt83 | CVSS3: 8.8 | больше 3 лет назад | |
| ALT-PU-2023-1309 ALT-PU-2023-1309: package `kernel-image-rt` update to version 5.10.168-alt1.rt83 | CVSS3: 8.8 | больше 3 лет назад | |
| ALT-PU-2023-1282 ALT-PU-2023-1282: package `kernel-image-std-kvm` update to version 5.10.168-alt1 | CVSS3: 8.8 | больше 3 лет назад | |
| ALT-PU-2023-1267 ALT-PU-2023-1267: package `kernel-image-mp` update to version 6.1.12-alt1 | CVSS3: 8.8 | больше 3 лет назад | |
| SUSE-SU-2025:1293-1 Security update for the Linux Kernel | больше 1 года назад | ||
| SUSE-SU-2025:1263-1 Security update for the Linux Kernel | больше 1 года назад | ||
| SUSE-SU-2025:1241-1 Security update for the Linux Kernel | больше 1 года назад |
Уязвимостей на страницу