Количество 115
Количество 115
ELSA-2023-5622
ELSA-2023-5622: kernel security and bug fix update (IMPORTANT)
CVE-2023-3609
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
CVE-2023-3609
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
CVE-2023-3609
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
CVE-2023-3609
CVE-2023-3609
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u3 ...
SUSE-SU-2023:3182-1
Security update for the Linux Kernel
SUSE-SU-2023:3309-1
Security update for the Linux Kernel
SUSE-SU-2023:3349-1
Security update for the Linux Kernel
SUSE-SU-2023:3675-1
Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4)
SUSE-SU-2023:3648-1
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP4)
SUSE-SU-2023:3620-1
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP2)
SUSE-SU-2023:3392-1
Security update for the Linux Kernel
SUSE-SU-2023:3668-1
Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4)
SUSE-SU-2023:3647-1
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP4)
SUSE-SU-2023:3628-1
Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP3)
SUSE-SU-2023:3612-1
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP2)
SUSE-SU-2023:3391-1
Security update for the Linux Kernel
SUSE-SU-2023:3390-1
Security update for the Linux Kernel
GHSA-2qmp-8j6q-mcq6
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ELSA-2023-5622 ELSA-2023-5622: kernel security and bug fix update (IMPORTANT) | больше 1 года назад | ||
 | CVE-2023-3609 A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc. | CVSS3: 7.8 | 0% Низкий | почти 2 года назад |
 | CVE-2023-3609 A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc. | CVSS3: 7 | 0% Низкий | почти 2 года назад |
 | CVE-2023-3609 A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc. | CVSS3: 7.8 | 0% Низкий | почти 2 года назад |
 | CVSS3: 7.8 | 0% Низкий | почти 2 года назад | |
| CVE-2023-3609 A use-after-free vulnerability in the Linux kernel's net/sched: cls_u3 ... | CVSS3: 7.8 | 0% Низкий | почти 2 года назад |
 | SUSE-SU-2023:3182-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2023:3309-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2023:3349-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2023:3675-1 Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4) | почти 2 года назад | ||
| SUSE-SU-2023:3648-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP4) | почти 2 года назад | ||
| SUSE-SU-2023:3620-1 Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP2) | почти 2 года назад | ||
| SUSE-SU-2023:3392-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2023:3668-1 Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4) | почти 2 года назад | ||
| SUSE-SU-2023:3647-1 Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP4) | почти 2 года назад | ||
| SUSE-SU-2023:3628-1 Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP3) | почти 2 года назад | ||
| SUSE-SU-2023:3612-1 Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP2) | почти 2 года назад | ||
| SUSE-SU-2023:3391-1 Security update for the Linux Kernel | почти 2 года назад | ||
| SUSE-SU-2023:3390-1 Security update for the Linux Kernel | почти 2 года назад | ||
| GHSA-2qmp-8j6q-mcq6 A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc. | CVSS3: 7.8 | 0% Низкий | почти 2 года назад |
Уязвимостей на страницу