Поиск уязвимостей

A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer. We recommend upgrading past commit 4716c73b188566865bdd79c3a6709696a224ac04 for 5.10 stable and 0e388fce7aec40992eadee654193cad345d62663 for 5.15 stable.

Уязвимость функции io_poll_update() в модуле io_uring/io_uring.c ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии

Security update for the Linux Kernel

Important: kernel security and bug fix update

ELSA-2023-7549: kernel security and bug fix update (IMPORTANT)

Security update for the Linux Kernel

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

Уязвимость функции u32_set_parms() в модуле net/sched/cls_u32.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность данных

ALT-PU-2023-1969: package `kernel-image-un-def` update to version 6.3.7-alt1

ALT-PU-2023-8801: package `kernel-image-std-def` update to version 6.1.33-alt1

ELSA-2023-12200: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2023-12199: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2023-12207: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2023-12177: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2023-12176: Unbreakable Enterprise kernel security update (IMPORTANT)

Security update for the Linux Kernel

ELSA-2023-12206: Unbreakable Enterprise kernel security update (IMPORTANT)

ALT-PU-2023-4663: package `kernel-image-pine` update to version 6.4.7-alt1

Security update for the Linux Kernel

Security update for the Linux Kernel