Поиск уязвимостей

Уязвимость функции pvr2_context_disconnect() в модуле drivers/media/usb/pvrusb2/pvrusb2-context.c драйвера Hauppauge WinTV-PVR USB2 ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2_context_thread_func function, which may call pvr2_context_destroy and thus call kfree() on the context object. However, that might happen before the usb hub_event handler is able to notify the driver. This patch adds a sanity check before the invalid read reported by syzbot, within the context disconnection call stack.

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2_context_thread_func function, which may call pvr2_context_destroy and thus call kfree() on the context object. However, that might happen before the usb hub_event handler is able to notify the driver. This patch adds a sanity check before the invalid read reported by syzbot, within the context disconnection call stack.

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2_context_thread_func function, which may call pvr2_context_destroy and thus call kfree() on the context object. However, that might happen before the usb hub_event handler is able to notify the driver. This patch adds a sanity check before the invalid read reported by syzbot, within the context disconnection call stack.

In the Linux kernel, the following vulnerability has been resolved: m ...

Множественные уязвимости kernel-lt

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2_context_thread_func function, which may call pvr2_context_destroy and thus call kfree() on the context object. However, that might happen before the usb hub_event handler is able to notify the driver. This patch adds a sanity check before the invalid read reported by syzbot, within the context disconnection call stack.

ALT-PU-2024-17576: package `kernel-image-std-def` update to version 5.10.209-alt2

ALT-PU-2024-18073: package `kernel-image-rt` update to version 5.10.209-alt1.rt101

ALT-PU-2024-18054: package `kernel-image-un-def` update to version 6.1.75-alt1

ALT-PU-2024-18358: package `kernel-image-std-def` update to version 6.1.75-alt2

ALT-PU-2024-18254: package `kernel-image-rt` update to version 6.1.75-alt1.rt23

ALT-PU-2024-18462: package `kernel-image-un-def` update to version 6.6.14-alt1

ALT-PU-2024-18203: package `kernel-image-pine` update to version 6.6.14-alt1

ALT-PU-2024-1865: package `kernel-image-mp` update to version 6.6.16-alt1

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

ELSA-2024-12606: Unbreakable Enterprise kernel security update (IMPORTANT)

Security update for the Linux Kernel