Поиск уязвимостей
Количество 59
Количество 59
BDU:2023-05389
Уязвимость функции unix_stream_sendpage() в модуле net/unix/af_unix.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации или повысить свои привилегии
ALT-PU-2024-1164
ALT-PU-2024-1164: package `kernel-image-centos` update to version 5.14.0.408-alt1.el9
ROS-20241008-10
Множественные уязвимости kernel-lt
CVE-2023-4622
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents).
CVE-2023-4622
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.
CVE-2023-4622
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents).
CVE-2023-4622
Use-after-free in Linux kernel's af_unix component
CVE-2023-4622
A use-after-free vulnerability in the Linux kernel's af_unix component ...
ALT-PU-2023-8582
ALT-PU-2023-8582: package `kernel-image-std-def` update to version 5.10.194-alt1
SUSE-SU-2023:4847-1
Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5)
SUSE-SU-2023:4831-1
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1)
SUSE-SU-2023:4799-1
Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP5)
SUSE-SU-2023:4795-1
Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP1)
GHSA-hxpr-87wq-jwf8
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.
ALT-PU-2023-8814
ALT-PU-2023-8814: package `kernel-image-std-def` update to version 6.1.47-alt1
SUSE-SU-2023:4866-1
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP2)
SUSE-SU-2023:4833-1
Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP2)
SUSE-SU-2023:4802-1
Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)
SUSE-SU-2023:4796-1
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP2)
ALT-PU-2023-8885
ALT-PU-2023-8885: package `kernel-image-un-def` update to version 6.4.12-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-05389 Уязвимость функции unix_stream_sendpage() в модуле net/unix/af_unix.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации или повысить свои привилегии | CVSS3: 7 | 1% Низкий | больше 3 лет назад |
| ALT-PU-2024-1164 ALT-PU-2024-1164: package `kernel-image-centos` update to version 5.14.0.408-alt1.el9 | CVSS3: 7 | 1% Низкий | почти 3 года назад |
 | ROS-20241008-10 Множественные уязвимости kernel-lt | CVSS3: 7.8 | около 2 лет назад | |
 | CVE-2023-4622 A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents). | CVSS3: 7 | 1% Низкий | около 3 лет назад |
 | CVE-2023-4622 A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c. | CVSS3: 6.6 | 1% Низкий | около 3 лет назад |
 | CVE-2023-4622 A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents). | CVSS3: 7 | 1% Низкий | около 3 лет назад |
 | CVE-2023-4622 Use-after-free in Linux kernel's af_unix component | CVSS3: 7 | 1% Низкий | около 3 лет назад |
| CVE-2023-4622 A use-after-free vulnerability in the Linux kernel's af_unix component ... | CVSS3: 7 | 1% Низкий | около 3 лет назад |
| ALT-PU-2023-8582 ALT-PU-2023-8582: package `kernel-image-std-def` update to version 5.10.194-alt1 | CVSS3: 7.8 | около 3 лет назад | |
 | SUSE-SU-2023:4847-1 Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5) | 1% Низкий | почти 3 года назад | |
| SUSE-SU-2023:4831-1 Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1) | 1% Низкий | почти 3 года назад | |
| SUSE-SU-2023:4799-1 Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP5) | 1% Низкий | почти 3 года назад | |
| SUSE-SU-2023:4795-1 Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP1) | 1% Низкий | почти 3 года назад | |
| GHSA-hxpr-87wq-jwf8 A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c. | CVSS3: 7.8 | 1% Низкий | около 3 лет назад |
| ALT-PU-2023-8814 ALT-PU-2023-8814: package `kernel-image-std-def` update to version 6.1.47-alt1 | CVSS3: 7.8 | около 3 лет назад | |
| SUSE-SU-2023:4866-1 Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP2) | почти 3 года назад | ||
| SUSE-SU-2023:4833-1 Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP2) | почти 3 года назад | ||
| SUSE-SU-2023:4802-1 Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2) | почти 3 года назад | ||
| SUSE-SU-2023:4796-1 Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP2) | почти 3 года назад | ||
| ALT-PU-2023-8885 ALT-PU-2023-8885: package `kernel-image-un-def` update to version 6.4.12-alt1 | CVSS3: 7.8 | около 3 лет назад |
Уязвимостей на страницу