Поиск уязвимостей

Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes socket state may race with safety checks in packet_set_ring. Previously with PACKET_VERSION. This time with PACKET_RESERVE. The solution is similar: lock the socket for the update. This issue may be exploitable, we did not investigate further. As this issue affects PF_PACKET sockets, it requires CAP_NET_RAW in the process namespace. But note that with user namespaces enabled, any process can create a namespace in which it has CAP_NET_RAW.

Уязвимость функции packet_set_ring (net/packet/af_packet.c) ядра операционных систем Linux, позволяющая нарушителю повысить свои привилегии, вызвать отказ в обслуживании или выполнить произвольный код

Security update for Linux Kernel Live Patch 21 for SLE 12

Security update for Linux Kernel Live Patch 19 for SLE 12

Security update for Linux Kernel Live Patch 16 for SLE 12

Security update for Linux Kernel Live Patch 17 for SLE 12

Security update for Linux Kernel Live Patch 18 for SLE 12

Security update for Linux Kernel Live Patch 23 for SLE 12

Security update for Linux Kernel Live Patch 22 for SLE 12

Security update for Linux Kernel Live Patch 20 for SLE 12

Security update for Linux Kernel Live Patch 0 for SLE 12 SP2

Security update for Linux Kernel Live Patch 11 for SLE 12 SP2

Security update for Linux Kernel Live Patch 10 for SLE 12 SP2

Security update for Linux Kernel Live Patch 4 for SLE 12 SP2

Security update for Linux Kernel Live Patch 9 for SLE 12 SP2

Security update for Linux Kernel Live Patch 6 for SLE 12 SP2

Security update for Linux Kernel Live Patch 8 for SLE 12 SP2

Security update for Linux Kernel Live Patch 3 for SLE 12 SP2

Security update for Linux Kernel Live Patch 1 for SLE 12 SP2

Security update for Linux Kernel Live Patch 5 for SLE 12 SP2