Поиск уязвимостей
Количество 23
Количество 23
CVE-2024-35962
In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;
CVE-2024-35962
In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;
CVE-2024-35962
In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;
CVE-2024-35962
In the Linux kernel, the following vulnerability has been resolved: n ...
GHSA-j7rq-227r-98j4
In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;
BDU:2024-10060
Уязвимость в компонента netfilter ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20241118-01
Множественные уязвимости kernel-lt
ALT-PU-2024-18369
ALT-PU-2024-18369: package `kernel-image-std-def` update to version 6.1.87-alt1
ELSA-2024-5928
ELSA-2024-5928: kernel security update (IMPORTANT)
ALT-PU-2024-18472
ALT-PU-2024-18472: package `kernel-image-un-def` update to version 6.6.28-alt1
ALT-PU-2024-18213
ALT-PU-2024-18213: package `kernel-image-pine` update to version 6.6.28-alt1
ALT-PU-2024-18145
ALT-PU-2024-18145: package `kernel-image-6.8` update to version 6.8.7-alt1
ALT-PU-2024-18078
ALT-PU-2024-18078: package `kernel-image-rt` update to version 5.10.216-alt1.rt108
SUSE-SU-2024:2381-1
Security update for the Linux Kernel
SUSE-SU-2024:2360-1
Security update for the Linux Kernel
SUSE-SU-2024:2561-1
Security update for the Linux Kernel
ALT-PU-2024-17905
ALT-PU-2024-17905: package `kernel-image-un-def` update to version 6.1.90-alt1
SUSE-SU-2024:2394-1
Security update for the Linux Kernel
SUSE-SU-2024:2372-1
Security update for the Linux Kernel
SUSE-SU-2024:2571-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-35962 In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL; | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-35962 In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL; | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-35962 In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL; | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
| CVE-2024-35962 In the Linux kernel, the following vulnerability has been resolved: n ... | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
| GHSA-j7rq-227r-98j4 In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL; | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | BDU:2024-10060 Уязвимость в компонента netfilter ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | ROS-20241118-01 Множественные уязвимости kernel-lt | CVSS3: 8.8 | почти 2 года назад | |
| ALT-PU-2024-18369 ALT-PU-2024-18369: package `kernel-image-std-def` update to version 6.1.87-alt1 | CVSS3: 9.1 | больше 2 лет назад | |
| ELSA-2024-5928 ELSA-2024-5928: kernel security update (IMPORTANT) | около 2 лет назад | ||
| ALT-PU-2024-18472 ALT-PU-2024-18472: package `kernel-image-un-def` update to version 6.6.28-alt1 | CVSS3: 9.1 | больше 2 лет назад | |
| ALT-PU-2024-18213 ALT-PU-2024-18213: package `kernel-image-pine` update to version 6.6.28-alt1 | CVSS3: 9.1 | больше 2 лет назад | |
| ALT-PU-2024-18145 ALT-PU-2024-18145: package `kernel-image-6.8` update to version 6.8.7-alt1 | CVSS3: 9.1 | больше 2 лет назад | |
| ALT-PU-2024-18078 ALT-PU-2024-18078: package `kernel-image-rt` update to version 5.10.216-alt1.rt108 | CVSS3: 9.1 | больше 2 лет назад | |
 | SUSE-SU-2024:2381-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| SUSE-SU-2024:2360-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| SUSE-SU-2024:2561-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| ALT-PU-2024-17905 ALT-PU-2024-17905: package `kernel-image-un-def` update to version 6.1.90-alt1 | CVSS3: 9.1 | больше 1 года назад | |
| SUSE-SU-2024:2394-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| SUSE-SU-2024:2372-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| SUSE-SU-2024:2571-1 Security update for the Linux Kernel | больше 2 лет назад |
Уязвимостей на страницу