Security update for the Linux Kernel (Live Patch 79 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)

In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original skb for the last slave (determined by bond_is_last_slave()) and clones it for others. Concurrent slave enslave/release can mutate the slave list during RCU-protected iteration, changing which slave is "last" mid-loop. This causes the original skb to be double-consumed (double-freed). Replace the racy bond_is_last_slave() check with a simple index comparison (i + 1 == slaves_count) against the pre-snapshot slave count taken via READ_ONCE() before the loop. This preserves the zero-copy optimization for the last slave while making the "last" determination stable against concurrent list mutations. The UAF can trigger the following crash: ================================================================== BUG: KASAN: slab-use-after-free in skb_clone Read of size 8 at addr ffff888100ef8d40 by task exploit/147 CPU: 1 U...

Уязвимость функции bond_xmit_broadcast компонента drivers/net/bonding/bond_main.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)

Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 47 for SUSE Linux Enterprise 15 SP4)

Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 46 for SUSE Linux Enterprise 15 SP4)

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)