Поиск уязвимостей

Уязвимость функции hci_sock_bound_ioctl () подсистемы HCI ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код в контексте ядра

ALT-PU-2021-2602: package `kernel-image-std-def` update to version 5.10.59-alt1

ALT-PU-2021-2523: package `kernel-image-un-def` update to version 5.13.11-alt1

ALT-PU-2021-2522: package `kernel-image-std-def` update to version 5.10.59-alt1

ALT-PU-2021-2521: package `kernel-image-std-debug` update to version 5.10.59-alt1

ALT-PU-2021-2658: package `kernel-image-un-def` update to version 5.13.13-alt1

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add() hci_sock_blacklist_del() hci_get_conn_info() hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.

A use-after-free in function hci_sock_bound_ioctl() of the Linux kerne ...

ALT-PU-2021-2678: package `kernel-image-std-debug` update to version 5.10.61-alt1

ALT-PU-2021-2677: package `kernel-image-std-pae` update to version 5.10.61-alt1

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.

ALT-PU-2021-2672: package `kernel-image-std-pae` update to version 5.10.61-alt1

Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP3)

ALT-PU-2022-7775: package `kernel-image-std-debug` update to version 5.15.72-alt1

Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP2)

Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP3)

ALT-PU-2021-2616: package `kernel-image-un-def` update to version 5.13.9-alt1