Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usb_get_bos_descriptor()' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usb_get_bos_descriptor()' encounters an iteration issue when skipping the 'USB_DT_DEVICE_CAPABILITY' descriptor type. This results in the same descriptor being read repeatedly. To address this issue, a 'goto' statement is introduced to ensure that the pointer and the amount read is updated correctly. This ensures that the function iterates to the next descriptor instead of reading the same descriptor repeatedly.

Уязвимость функции usb_get_bos_descriptor() компонента drivers/usb/core/config.c ядра операционной системы Linux, позволяющая нарушителю получить доступ к конфиденциальным данным

Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)

Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP1)

Security update for the Linux Kernel (Live Patch 44 for SLE 12 SP5)

Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP1)

Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5)

Security update for the Linux Kernel RT (Live Patch 17 for SLE 15 SP4)

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.

Уязвимость функции igmp_start_timer() в модуле net/ipv4/igmp.c реализации протокола IGMP ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации и повысить свои привилегии в системе

Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP4)

Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP3)

Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3)

Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP3)

Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)

Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3)

Security update for the Linux Kernel RT (Live Patch 15 for SLE 15 SP4)

Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5)