Поиск уязвимостей

ALT-PU-2014-2009: package `kernel-image-un-def` update to version 3.15.10-alt1

ALT-PU-2014-2043: package `kernel-image-std-def` update to version 3.12.27-alt1

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel throug ...

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

ELSA-2014-3048: unbreakable enterprise kernel security update (IMPORTANT)

ELSA-2014-3047: unbreakable enterprise kernel security update (IMPORTANT)

ELSA-2014-0924: kernel security update (IMPORTANT)

ELSA-2014-0923: kernel security update (IMPORTANT)

Security update for Linux kernel

Security update for Linux kernel

ELSA-2014-3049: unbreakable enterprise kernel security update (IMPORTANT)

ELSA-2014-3046: unbreakable enterprise kernel security update (IMPORTANT)

The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem.

The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem.

The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem.

The implementation of certain splice_write file operations in the Linu ...

The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by starting to establish an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association between these endpoints in the opposite direction.