Поиск уязвимостей

Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP2)

Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)

ELSA-2023-12839: kernel security update (IMPORTANT)

Security update for the Linux Kernel

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

Use-after-free in Linux kernel's net/sched: cls_u32 component

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u3 ...

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP4)

Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP4)

Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP3)

Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP3)

Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)

Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5)

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.

Уязвимость функции ksmbd_verify_smb_message() в модуле fs/smb/server/smb_common.c файловой системы KSMBD ядра операционной системы Linux, позволяющая нарушителю получить доступ к защищаемой информации или вызвать отказ в обслуживании.