Поиск уязвимостей

Security update for Linux kernel

ALT-PU-2014-1547: package `kernel-image-el7-def` update to version 3.10.0-alt4

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes which allows local users to obtain sensitive information from kernel memory cause a denial of service (memory corruption and system crash) or possibly gain privileges via a writev system call with a crafted pointer.

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel th ...

ELSA-2014-0475: kernel security and bug fix update (IMPORTANT)

ALT-PU-2014-1458: package `kernel-image-std-def` update to version 3.12.17-alt1

ALT-PU-2014-1350: package `kernel-image-ovz-el` update to version 2.6.32-alt116

ALT-PU-2014-1349: package `kernel-image-el-def` update to version 2.6.32-alt19

ALT-PU-2014-1340: package `kernel-image-un-def` update to version 3.13.6-alt2

ALT-PU-2014-1337: package `kernel-image-std-pae` update to version 3.10.33-alt2

ALT-PU-2014-1333: package `kernel-image-std-def` update to version 3.10.33-alt2

ALT-PU-2014-1330: package `kernel-image-led-vs` update to version 3.10.33-alt6

ALT-PU-2014-1329: package `kernel-image-led-ws` update to version 3.10.33-alt6

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании, повысить свои привилегии или выполнить произвольный код

ALT-PU-2014-3215: package `kernel-image-std-def` update to version 3.10.33-alt1

The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.