Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

crypto: algif_aead - Revert to operating out-of-place

In the Linux kernel, the following vulnerability has been resolved: c ...

Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 79 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)

In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original skb for the last slave (determined by bond_is_last_slave()) and clones it for others. Concurrent slave enslave/release can mutate the slave list during RCU-protected iteration, changing which slave is "last" mid-loop. This causes the original skb to be double-consumed (double-freed). Replace the racy bond_is_last_slave() check with a simple index comparison (i + 1 == slaves_count) against the pre-snapshot slave count taken via READ_ONCE() before the loop. This preserves the zero-copy optimization for the last slave while making the "last" determination stable against concurrent list mutations. The UAF can trigger the following crash: ================================================================== BUG: KASAN: slab-use-after-free in skb_clone Read of size 8 at addr ffff888100ef8d40 by task exploit/147 CPU: 1 U...

Уязвимость функции bond_xmit_broadcast компонента drivers/net/bonding/bond_main.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)

Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 47 for SUSE Linux Enterprise 15 SP4)

Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 15 SP7)