Поиск уязвимостей

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will lead to a use-after-free in Linux netback when the backend is destroyed, as the kernel thread associated with queue 0 will have already exited and thus the call to kthread_stop will be performed against a stale pointer.

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will lead to a use-after-free in Linux netback when the backend is destroyed, as the kernel thread associated with queue 0 will have already exited and thus the call to kthread_stop will be performed against a stale pointer.

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will lead to a use-after-free in Linux netback when the backend is destroyed as the kernel thread associated with queue 0 will have already exited and thus the call to kthread_stop will be performed against a stale pointer.

Guest triggered use-after-free in Linux xen-netback A malicious or bug ...

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will lead to a use-after-free in Linux netback when the backend is destroyed, as the kernel thread associated with queue 0 will have already exited and thus the call to kthread_stop will be performed against a stale pointer.

Уязвимость компонента xen-netback ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии или раскрыть защищаемую информацию

ALT-PU-2021-2370: package `kernel-image-std-debug` update to version 5.10.54-alt1

ALT-PU-2021-2678: package `kernel-image-std-debug` update to version 5.10.61-alt1

ALT-PU-2021-2677: package `kernel-image-std-pae` update to version 5.10.61-alt1

ALT-PU-2021-2672: package `kernel-image-std-pae` update to version 5.10.61-alt1

ALT-PU-2021-1989: package `kernel-image-std-def` update to version 5.10.43-alt1

ALT-PU-2022-7775: package `kernel-image-std-debug` update to version 5.15.72-alt1

ALT-PU-2021-1525: package `kernel-image-un-def` update to version 5.11.7-alt1

ALT-PU-2021-1447: package `kernel-image-mp` update to version 5.11.4-alt1

ALT-PU-2021-2165: package `kernel-image-rt` update to version 5.10.47-alt1.rt45

ALT-PU-2021-2334: package `kernel-image-std-kvm` update to version 5.10.53-alt1

ALT-PU-2022-1240: package `kernel-image-std-def` update to version 5.15.22-alt1

ALT-PU-2021-1888: package `kernel-image-rpi-un` update to version 5.12.6-alt1

ALT-PU-2021-2293: package `kernel-image-rpi-def` update to version 5.10.50-alt1

ALT-PU-2021-1990: package `kernel-image-un-def` update to version 5.12.10-alt1