Поиск уязвимостей

ALT-PU-2021-3341: package `kernel-image-un-def` update to version 5.14.20-alt1

ALT-PU-2021-3305: package `kernel-image-un-def` update to version 5.14.20-alt1

ALT-PU-2021-3304: package `kernel-image-std-def` update to version 5.10.80-alt1

ELSA-2022-9148: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2022-9147: Unbreakable Enterprise kernel security update (IMPORTANT)

ALT-PU-2021-3306: package `kernel-image-std-kvm` update to version 5.10.80-alt1

ALT-PU-2021-3330: package `kernel-image-mp` update to version 5.15.4-alt1

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kern ...

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.

Уязвимость функции sco_sock_sendmsg() подсистемы HCI ядра операционной системы Linux, позволяющая нарушителю вызвать аварийное завершение системы или повысить свои привилегии

ALT-PU-2021-3469: package `kernel-image-std-def` update to version 5.10.82-alt1

Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP3)

ALT-PU-2021-3303: package `kernel-image-std-debug` update to version 5.10.80-alt1

ALT-PU-2021-3302: package `kernel-image-std-pae` update to version 5.10.80-alt1

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.