Поиск уязвимостей
Количество 32
Количество 32
BDU:2024-06048
Уязвимость функции taprio_parse_mqprio_opt() подсистемы управления трафиком net/sched ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации
CVE-2024-36974
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.
CVE-2024-36974
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.
CVE-2024-36974
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.
CVE-2024-36974
In the Linux kernel, the following vulnerability has been resolved: n ...
GHSA-rx99-hq7r-6g3r
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.
ROS-20241129-01
Множественные уязвимости kernel-lt
SUSE-SU-2025:0669-1
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)
SUSE-SU-2025:0703-1
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
SUSE-SU-2025:0687-1
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)
SUSE-SU-2025:0656-1
Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)
SUSE-SU-2025:0709-1
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
SUSE-SU-2025:0708-1
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
SUSE-SU-2025:0698-1
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
SUSE-SU-2025:0681-1
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
SUSE-SU-2025:0652-1
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
ALT-PU-2024-9967
ALT-PU-2024-9967: package `kernel-image-std-def` update to version 5.10.221-alt1
ALT-PU-2024-9973
ALT-PU-2024-9973: package `kernel-image-rt` update to version 5.10.221-alt1.rt113
ALT-PU-2024-9776
ALT-PU-2024-9776: package `kernel-image-un-def` update to version 6.1.96-alt1
SUSE-SU-2024:2923-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-06048 Уязвимость функции taprio_parse_mqprio_opt() подсистемы управления трафиком net/sched ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации | CVSS3: 6.1 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-36974 In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-36974 In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen. | CVSS3: 6.1 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-36974 In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
| CVE-2024-36974 In the Linux kernel, the following vulnerability has been resolved: n ... | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
| GHSA-rx99-hq7r-6g3r In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
 | ROS-20241129-01 Множественные уязвимости kernel-lt | CVSS3: 8.8 | почти 2 года назад | |
 | SUSE-SU-2025:0669-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6) | больше 1 года назад | ||
| SUSE-SU-2025:0703-1 Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5) | больше 1 года назад | ||
| SUSE-SU-2025:0687-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6) | больше 1 года назад | ||
| SUSE-SU-2025:0656-1 Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5) | больше 1 года назад | ||
| SUSE-SU-2025:0709-1 Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4) | больше 1 года назад | ||
| SUSE-SU-2025:0708-1 Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3) | больше 1 года назад | ||
| SUSE-SU-2025:0698-1 Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4) | больше 1 года назад | ||
| SUSE-SU-2025:0681-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6) | больше 1 года назад | ||
| SUSE-SU-2025:0652-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) | больше 1 года назад | ||
| ALT-PU-2024-9967 ALT-PU-2024-9967: package `kernel-image-std-def` update to version 5.10.221-alt1 | CVSS3: 8.8 | больше 2 лет назад | |
| ALT-PU-2024-9973 ALT-PU-2024-9973: package `kernel-image-rt` update to version 5.10.221-alt1.rt113 | CVSS3: 8.8 | больше 2 лет назад | |
| ALT-PU-2024-9776 ALT-PU-2024-9776: package `kernel-image-un-def` update to version 6.1.96-alt1 | CVSS3: 8.8 | больше 2 лет назад | |
| SUSE-SU-2024:2923-1 Security update for the Linux Kernel | около 2 лет назад |
Уязвимостей на страницу