Количество 26
Количество 26
BDU:2025-15231
Уязвимость функции tls_do_decryption() (net/tls/tls_sw.c) ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии
ROS-20260403-73-0018
Уязвимость kernel-lt
CVE-2024-58240
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier.
CVE-2024-58240
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier.
CVE-2024-58240
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier.
CVE-2024-58240
tls: separate no-async decryption request handling from async
CVE-2024-58240
In the Linux kernel, the following vulnerability has been resolved: t ...
GHSA-fpx7-665w-c5c9
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier.
ALT-PU-2024-18467
ALT-PU-2024-18467: package `kernel-image-un-def` update to version 6.6.21-alt1
ALT-PU-2024-18209
ALT-PU-2024-18209: package `kernel-image-pine` update to version 6.6.21-alt1
ALT-PU-2025-16600
ALT-PU-2025-16600: package `kernel-image-un-def` update to version 6.1.151-alt1
ALT-PU-2024-18117
ALT-PU-2024-18117: package `kernel-image-mp` update to version 6.7.12-alt1
ALT-PU-2024-6818
ALT-PU-2024-6818: package `kernel-image-rpi-un` update to version 6.6.23-alt1
SUSE-SU-2025:03626-1
Security update for the Linux Kernel
ALT-PU-2024-14046
ALT-PU-2024-14046: package `kernel-image-rpi-un` update to version 6.6.56-alt1
SUSE-SU-2025:03614-1
Security update for the Linux Kernel
SUSE-SU-2025:03628-1
Security update for the Linux Kernel
SUSE-SU-2025:3751-1
Security update for the Linux Kernel
SUSE-SU-2025:03600-1
Security update for the Linux Kernel
SUSE-SU-2025:03615-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-15231 Уязвимость функции tls_do_decryption() (net/tls/tls_sw.c) ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии | CVSS3: 7.3 | 0% Низкий | больше 2 лет назад |
 | ROS-20260403-73-0018 Уязвимость kernel-lt | CVSS3: 7.3 | 0% Низкий | 6 месяцев назад |
 | CVE-2024-58240 In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier. | CVSS3: 7.8 | 0% Низкий | около 1 года назад |
 | CVE-2024-58240 In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier. | CVSS3: 7.3 | 0% Низкий | около 1 года назад |
 | CVE-2024-58240 In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier. | CVSS3: 7.8 | 0% Низкий | около 1 года назад |
 | CVE-2024-58240 tls: separate no-async decryption request handling from async | CVSS3: 7.8 | 0% Низкий | 9 месяцев назад |
| CVE-2024-58240 In the Linux kernel, the following vulnerability has been resolved: t ... | CVSS3: 7.8 | 0% Низкий | около 1 года назад |
| GHSA-fpx7-665w-c5c9 In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier. | CVSS3: 7.8 | 0% Низкий | около 1 года назад |
| ALT-PU-2024-18467 ALT-PU-2024-18467: package `kernel-image-un-def` update to version 6.6.21-alt1 | CVSS3: 8.8 | больше 2 лет назад | |
| ALT-PU-2024-18209 ALT-PU-2024-18209: package `kernel-image-pine` update to version 6.6.21-alt1 | CVSS3: 8.8 | больше 2 лет назад | |
| ALT-PU-2025-16600 ALT-PU-2025-16600: package `kernel-image-un-def` update to version 6.1.151-alt1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2024-18117 ALT-PU-2024-18117: package `kernel-image-mp` update to version 6.7.12-alt1 | CVSS3: 9.1 | больше 2 лет назад | |
| ALT-PU-2024-6818 ALT-PU-2024-6818: package `kernel-image-rpi-un` update to version 6.6.23-alt1 | CVSS3: 9.4 | больше 2 лет назад | |
 | SUSE-SU-2025:03626-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| ALT-PU-2024-14046 ALT-PU-2024-14046: package `kernel-image-rpi-un` update to version 6.6.56-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| SUSE-SU-2025:03614-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| SUSE-SU-2025:03628-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| SUSE-SU-2025:3751-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| SUSE-SU-2025:03600-1 Security update for the Linux Kernel | 12 месяцев назад | ||
| SUSE-SU-2025:03615-1 Security update for the Linux Kernel | 12 месяцев назад |
Уязвимостей на страницу