Поиск уязвимостей

The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.

The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.

The function hso_get_config_data in drivers/net/usb/hso.c in the Linux ...

ELSA-2020-1016: kernel security, bug fix, and enhancement update (MODERATE)

ELSA-2019-3517: kernel security, bug fix, and enhancement update (IMPORTANT)

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.

Уязвимость функции __usb_get_extra_descriptor подсистемы USB ядра операционных систем Linux, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации

The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.

Уязвимость функции hso_get_config_data ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании

Security update for the Linux Kernel

ELSA-2019-4646: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2019-4645: Unbreakable Enterprise kernel security update (IMPORTANT)

ALT-PU-2019-1058: package `kernel-image-std-pae` update to version 4.14.94-alt1

ALT-PU-2019-1028: package `kernel-image-std-debug` update to version 4.14.92-alt1

Уязвимость функции calculate_gain() аудио декодера Freeware Advanced Audio Decoder 2 (FAAD2), позволяющая нарушителю оказать воздействие на целостность данных, получить несанкционированный доступ к защищаемой информации, а также вызвать отказ в обслуживании

ELSA-2019-4729: Unbreakable Enterprise kernel security update (IMPORTANT)

ALT-PU-2018-2842: package `kernel-image-std-def` update to version 4.14.88-alt1

ELSA-2019-4642: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2019-4854: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2019-4644: Unbreakable Enterprise kernel security update (IMPORTANT)