Поиск уязвимостей

The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte (and bypass slab-allocation access restrictions) via an application that opens the /dev/mem file, related to arch/x86/mm/init.c and drivers/char/mem.c.

Уязвимость операционной системы Linux, позволяющая нарушителю считывать или записывать в ячейки памяти ядра

The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.

Security update for the Linux Kernel

Security update for the Linux Kernel

ELSA-2017-3636: Unbreakable Enterprise kernel security update (IMPORTANT)

ALT-PU-2018-1991: package `kernel-image-std-def` update to version 4.14.53-alt1

Security update for the Linux Kernel

Security update for the Linux Kernel

ELSA-2017-3651: Unbreakable Enterprise kernel security update (IMPORTANT)

Security update for the Linux Kernel

Security update for the Linux Kernel

ALT-PU-2017-1508: package `kernel-image-un-def` update to version 4.10.12-alt1

ALT-PU-2017-1507: package `kernel-image-std-def` update to version 4.9.24-alt1

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

ALT-PU-2017-2467: package `kernel-image-un-def` update to version 4.13.8-alt1.1

Security update for the Linux Kernel

Security update for the Linux Kernel