Поиск уязвимостей

Уязвимость функции qfq_dequeue() в модуле net/sched/sch_plug.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации или повысить свои привилегии

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue(). We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue(). We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue(). We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.

Use-after-free in Linux kernel's net/sched: sch_qfq component

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qf ...

Множественные уязвимости kernel-lt

ALT-PU-2023-8817: package `kernel-image-std-def` update to version 6.1.54-alt1

ALT-PU-2023-8572: package `kernel-image-un-def` update to version 6.1.54-alt1

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue(). We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.

ALT-PU-2023-8485: package `kernel-image-std-def` update to version 5.10.195-alt1

Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)

Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5)

ALT-PU-2023-8592: package `kernel-image-rt` update to version 5.10.197-alt1.rt96

ALT-PU-2023-5787: package `kernel-image-un-def` update to version 6.5.4-alt1

ALT-PU-2023-5748: package `kernel-image-mp` update to version 6.5.4-alt1

Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP4)

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)