Поиск уязвимостей

Уязвимость модуля ZRAM ядра операционных систем Linux, Ubuntu и OpenSUSE Leap, позволяющая нарушителю вызвать отказ в обслуживании

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes possibly making the system inoperable.

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel ...

ALT-PU-2020-2688: package `kernel-image-mp` update to version 5.8.4-alt1

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.

ALT-PU-2020-2716: package `kernel-image-rpi-un` update to version 5.8.2-alt1

ALT-PU-2020-2770: package `kernel-image-un-def` update to version 5.8.8-alt1

Security update for the Linux Kernel

ELSA-2020-5848: Unbreakable Enterprise kernel security update (IMPORTANT)

Security update for the Linux Kernel

ELSA-2020-5844: Unbreakable Enterprise kernel security update (IMPORTANT)

ALT-PU-2021-1621: package `kernel-image-std-def` update to version 5.10.28-alt1

ALT-PU-2021-1656: package `kernel-image-std-kvm` update to version 5.10.29-alt1

Security update for the Linux Kernel

Security update for the Linux Kernel

ELSA-2020-5885: Unbreakable Enterprise kernel security update (IMPORTANT)

ALT-PU-2021-1862: package `kernel-image-rpi-def` update to version 5.10.36-alt1