Поиск уязвимостей

Security update for the Linux Kernel

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutex (instead of RTNL) to protect the multicast route list, so that it will not change while the driver periodically traverses it in order to update the kernel about multicast route stats that were queried from the device. One instance of list entry deletion (during route replace) was missed and it can result in a use-after-free [1]. Fix by acquiring the mutex before deleting the entry from the list and releasing it afterwards. [1] BUG: KASAN: slab-use-after-free in mlxsw_sp_mr_stats_update+0x4a5/0x540 drivers/net/ethernet/mellanox/mlxsw/spectrum_mr.c:1006 [mlxsw_spectrum] Read of size 8 at addr ffff8881523c2fa8 by task kworker/2:5/22043 CPU: 2 UID: 0 PID: 22043 Comm: kworker/2:5 Not tainted 6.18.0-rc1-custom-g1a3d6d7cd014 #1 PREEMPT(full) Hardware name: Mellanox Technologies Ltd. MSN2010/SA002610, BIOS 5...

Уязвимость функции spectrum_mr() ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

In the Linux kernel, the following vulnerability has been resolved: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). smc_clc_prfx_match() is called from smc_listen_work() and not under RCU nor RTNL. Using sk_dst_get(sk)->dev could trigger UAF. Let's use __sk_dst_get() and dst_dev_rcu(). Note that the returned value of smc_clc_prfx_match() is not used in the caller.

Уязвимость функции smc_clc_prfx_match6_rcu() модуля net/smc/smc_clc.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Security update for the Linux Kernel

Moderate: kernel security update

ELSA-2026-6153: kernel security update (MODERATE)

Security update for the Linux Kernel

Уязвимость kernel-lt

Уязвимость kernel-lt

Moderate: kernel security update

ELSA-2026-4759: kernel security update (MODERATE)

Moderate: kernel security update

Moderate: kernel security update

ELSA-2026-3488: kernel security update (MODERATE)

ELSA-2026-2720: kernel security update (MODERATE)

ELSA-2026-3083: kernel security update (IMPORTANT)

ELSA-2025-20552: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2025-28040: Unbreakable Enterprise kernel security update (IMPORTANT)