Поиск уязвимостей

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary (can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partial control over the command line) can overflow the parport_nr array in the following code, by appending many (>LP_NO) 'lp=none' arguments to the command line.

Уязвимость функции lp_setup() загрузчика среды Secure Boot ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Security update for the Linux Kernel

Security update for Linux Kernel Live Patch 6 for SLE 12 SP2

Security update for Linux Kernel Live Patch 9 for SLE 12 SP2

Security update for Linux Kernel Live Patch 7 for SLE 12 SP2

Security update for Linux Kernel Live Patch 8 for SLE 12 SP2

Security update for Linux Kernel Live Patch 2 for SLE 12 SP2

Security update for Linux Kernel Live Patch 1 for SLE 12 SP2

Security update for Linux Kernel Live Patch 4 for SLE 12 SP2

Security update for Linux Kernel Live Patch 5 for SLE 12 SP2

Security update for Linux Kernel Live Patch 0 for SLE 12 SP2

Security update for Linux Kernel Live Patch 3 for SLE 12 SP2

Security update for the Linux Kernel

ALT-PU-2017-1699: package `kernel-image-std-def` update to version 4.9.31-alt1

ALT-PU-2017-1808: package `kernel-image-ovz-el` update to version 2.6.32-alt154

sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.

sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.

sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.

sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to ...