Количество 59
Количество 59

CVE-2024-53122
In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs. A racing recvmsg() spooling data received on an already established subflow would unconditionally call tcp_cleanup_rbuf() on all the current subflows, potentially hitting a divide by zero error on the newly created ones. Explicitly check that the subflow is in a suitable state before invoking tcp_cleanup_rbuf().

CVE-2024-53122
In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs. A racing recvmsg() spooling data received on an already established subflow would unconditionally call tcp_cleanup_rbuf() on all the current subflows, potentially hitting a divide by zero error on the newly created ones. Explicitly check that the subflow is in a suitable state before invoking tcp_cleanup_rbuf().

CVE-2024-53122
CVE-2024-53122
In the Linux kernel, the following vulnerability has been resolved: m ...

SUSE-SU-2024:4388-1
Security update for the Linux Kernel

SUSE-SU-2024:4316-1
Security update for the Linux Kernel

SUSE-SU-2024:4314-1
Security update for the Linux Kernel

SUSE-SU-2024:4313-1
Security update for the Linux Kernel
GHSA-jgpx-8fg9-hh7j
In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it. Note that in the lock order comment the perf_event::mmap_mutex order was already wrong, that is, it nesting under mmap_lock is not new with this patch.

BDU:2024-10375
Уязвимость функции mmap_mutex ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность
GHSA-x34g-xjxv-fc48
In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs. A racing recvmsg() spooling data received on an already established subflow would unconditionally call tcp_cleanup_rbuf() on all the current subflows, potentially hitting a divide by zero error on the newly created ones. Explicitly check that the subflow is in a suitable state before invoking tcp_cleanup_rbuf().

BDU:2025-03323
Уязвимость компонента mptcp ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

ROS-20250319-02
Множественные уязвимости kernel-lt

RLSA-2025:0065
Important: kernel security update
ELSA-2025-0065
ELSA-2025-0065: kernel security update (IMPORTANT)

SUSE-SU-2024:4318-1
Security update for the Linux Kernel

SUSE-SU-2024:4131-1
Security update for the Linux Kernel

SUSE-SU-2025:0289-1
Security update for the Linux Kernel

ROS-20250314-02
Множественные уязвимости kernel-lt
ELSA-2024-12887
ELSA-2024-12887: Unbreakable Enterprise kernel security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | CVE-2024-53122 In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs. A racing recvmsg() spooling data received on an already established subflow would unconditionally call tcp_cleanup_rbuf() on all the current subflows, potentially hitting a divide by zero error on the newly created ones. Explicitly check that the subflow is in a suitable state before invoking tcp_cleanup_rbuf(). | CVSS3: 5.9 | 0% Низкий | 7 месяцев назад |
![]() | CVE-2024-53122 In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs. A racing recvmsg() spooling data received on an already established subflow would unconditionally call tcp_cleanup_rbuf() on all the current subflows, potentially hitting a divide by zero error on the newly created ones. Explicitly check that the subflow is in a suitable state before invoking tcp_cleanup_rbuf(). | CVSS3: 5.5 | 0% Низкий | 7 месяцев назад |
![]() | CVSS3: 5.5 | 0% Низкий | 5 месяцев назад | |
CVE-2024-53122 In the Linux kernel, the following vulnerability has been resolved: m ... | CVSS3: 5.5 | 0% Низкий | 7 месяцев назад | |
![]() | SUSE-SU-2024:4388-1 Security update for the Linux Kernel | 6 месяцев назад | ||
![]() | SUSE-SU-2024:4316-1 Security update for the Linux Kernel | 6 месяцев назад | ||
![]() | SUSE-SU-2024:4314-1 Security update for the Linux Kernel | 6 месяцев назад | ||
![]() | SUSE-SU-2024:4313-1 Security update for the Linux Kernel | 6 месяцев назад | ||
GHSA-jgpx-8fg9-hh7j In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it. Note that in the lock order comment the perf_event::mmap_mutex order was already wrong, that is, it nesting under mmap_lock is not new with this patch. | 0% Низкий | 9 месяцев назад | ||
![]() | BDU:2024-10375 Уязвимость функции mmap_mutex ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность | CVSS3: 5.5 | 0% Низкий | 10 месяцев назад |
GHSA-x34g-xjxv-fc48 In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs. A racing recvmsg() spooling data received on an already established subflow would unconditionally call tcp_cleanup_rbuf() on all the current subflows, potentially hitting a divide by zero error on the newly created ones. Explicitly check that the subflow is in a suitable state before invoking tcp_cleanup_rbuf(). | CVSS3: 5.5 | 0% Низкий | 7 месяцев назад | |
![]() | BDU:2025-03323 Уязвимость компонента mptcp ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | 7 месяцев назад |
![]() | ROS-20250319-02 Множественные уязвимости kernel-lt | CVSS3: 7.8 | 3 месяца назад | |
![]() | RLSA-2025:0065 Important: kernel security update | 5 месяцев назад | ||
ELSA-2025-0065 ELSA-2025-0065: kernel security update (IMPORTANT) | 5 месяцев назад | |||
![]() | SUSE-SU-2024:4318-1 Security update for the Linux Kernel | 6 месяцев назад | ||
![]() | SUSE-SU-2024:4131-1 Security update for the Linux Kernel | 7 месяцев назад | ||
![]() | SUSE-SU-2025:0289-1 Security update for the Linux Kernel | 5 месяцев назад | ||
![]() | ROS-20250314-02 Множественные уязвимости kernel-lt | CVSS3: 7.8 | 3 месяца назад | |
ELSA-2024-12887 ELSA-2024-12887: Unbreakable Enterprise kernel security update (IMPORTANT) | 6 месяцев назад |
Уязвимостей на страницу