Поиск уязвимостей

Уязвимость реализации протокола Upper Level Protocol (ULP) ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии, выполнить произвольный код или вызвать отказ в обслуживании

ALT-PU-2023-1060: package `kernel-image-un-def` update to version 5.15.88-alt1

ALT-PU-2023-1048: package `kernel-image-std-def` update to version 5.15.88-alt1

There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege. There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock. When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable. The setsockopt TCP_ULP operation does not require any privilege. We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c

There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege. There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock. When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable. The setsockopt TCP_ULP operation does not require any privilege. We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c

There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege. There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock. When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable. The setsockopt TCP_ULP operation does not require any privilege. We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c

There is a use-after-free vulnerability in the Linux Kernel which can ...

There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege. There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock. When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable. The setsockopt TCP_ULP operation does not require any privilege. We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c

ALT-PU-2023-1039: package `kernel-image-un-def` update to version 6.0.19-alt1

ALT-PU-2020-1145: package `kernel-image-un-def` update to version 5.5.1-alt1

ALT-PU-2020-1251: package `kernel-image-mp` update to version 5.5.4-alt1

ALT-PU-2019-1363: package `kernel-image-un-def` update to version 4.20.14-alt1

ALT-PU-2019-1139: package `kernel-image-mp` update to version 4.20.4-alt1

ALT-PU-2018-1557: package `kernel-image-un-def` update to version 4.16.0-alt1

ALT-PU-2021-1525: package `kernel-image-un-def` update to version 5.11.7-alt1

ALT-PU-2022-7829: package `kernel-image-un-def` update to version 5.16.0-alt1

ALT-PU-2021-1447: package `kernel-image-mp` update to version 5.11.4-alt1

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)