Поиск уязвимостей

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.

Уязвимость модуля ksmbd ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Уязвимость функции ksmbd_smb2_check_message ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код

Security update for the Linux Kernel

ALT-PU-2024-4843: package `kernel-image-rpi-un` update to version 6.1.77-alt1

ALT-PU-2024-4263: package `kernel-image-rpi-un` update to version 6.1.77-alt1

Уязвимость kernel-lt

Уязвимость kernel-lt

Множественные уязвимости kernel-lt

Множественные уязвимости ядра ОС