Поиск уязвимостей

crypto: algif_aead - Revert to operating out-of-place

In the Linux kernel, the following vulnerability has been resolved: c ...

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses. This size was calculated based on OPEN responses and does not account for LOCK denied responses, which include the conflicting lock owner as a variable-length field up to 1024 bytes (NFS4_OPAQUE_LIMIT). When a LOCK operation is denied due to a conflict with an existing lock that has a large owner, nfsd4_encode_operation() copies the full encoded response into the undersized replay buffer via read_bytes_from_xdr_buf() with no bounds check. This results in a slab-out-of-bounds write of up to 944 bytes past the end of the buffer, corrupting adjacent heap memory. This can be triggered remotely by an unauthenticated attacker with two cooperating NFSv4.0 clients: one sets a lock with a large owner string, then the other requests a conflict...

Уязвимость компонента NFSv4.0 ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Security update for the Linux Kernel

Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 79 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

ELSA-2026-50255: Unbreakable Enterprise kernel security update: Copy Fail (IMPORTANT)