Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a stack as a 1/2/4-byte register, we set slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it, depending on actual spill size). So to check if some stack slot has spilled register we need to consult slot_type[7], not slot_type[0]. To avoid the need to remember and double-check this in the future, just use is_spilled_reg() helper.

In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a stack as a 1/2/4-byte register, we set slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it, depending on actual spill size). So to check if some stack slot has spilled register we need to consult slot_type[7], not slot_type[0]. To avoid the need to remember and double-check this in the future, just use is_spilled_reg() helper.

In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a stack as a 1/2/4-byte register, we set slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it, depending on actual spill size). So to check if some stack slot has spilled register we need to consult slot_type[7], not slot_type[0]. To avoid the need to remember and double-check this in the future, just use is_spilled_reg() helper.

In the Linux kernel, the following vulnerability has been resolved: b ...

In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a stack as a 1/2/4-byte register, we set slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it, depending on actual spill size). So to check if some stack slot has spilled register we need to consult slot_type[7], not slot_type[0]. To avoid the need to remember and double-check this in the future, just use is_spilled_reg() helper.

Уязвимость функции check_stack_write_fixed_off() в модуле kernel/bpf/verifier.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

Множественные уязвимости kernel-lt

Security update for the Linux Kernel

ALT-PU-2024-17576: package `kernel-image-std-def` update to version 5.10.209-alt2

ALT-PU-2024-18073: package `kernel-image-rt` update to version 5.10.209-alt1.rt101

ALT-PU-2024-18054: package `kernel-image-un-def` update to version 6.1.75-alt1

ALT-PU-2024-18358: package `kernel-image-std-def` update to version 6.1.75-alt2

ALT-PU-2024-18254: package `kernel-image-rt` update to version 6.1.75-alt1.rt23

Security update for the Linux Kernel

Security update for the Linux Kernel

Security update for the Linux Kernel

ALT-PU-2024-18462: package `kernel-image-un-def` update to version 6.6.14-alt1

ALT-PU-2024-18203: package `kernel-image-pine` update to version 6.6.14-alt1

ALT-PU-2024-1865: package `kernel-image-mp` update to version 6.6.16-alt1

ELSA-2024-9315: kernel security update (MODERATE)