Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: comedi: ni_usb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501_port_command() and ni6501_counter_command() if a (malicious) device has smaller max-packet sizes than expected (or when doing descriptor fuzz testing). Add the missing sanity checks to probe().

In the Linux kernel, the following vulnerability has been resolved: comedi: ni_usb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501_port_command() and ni6501_counter_command() if a (malicious) device has smaller max-packet sizes than expected (or when doing descriptor fuzz testing). Add the missing sanity checks to probe().

In the Linux kernel, the following vulnerability has been resolved: comedi: ni_usb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501_port_command() and ni6501_counter_command() if a (malicious) device has smaller max-packet sizes than expected (or when doing descriptor fuzz testing). Add the missing sanity checks to probe().

In the Linux kernel, the following vulnerability has been resolved: c ...

In the Linux kernel, the following vulnerability has been resolved: comedi: ni_usb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501_port_command() and ni6501_counter_command() if a (malicious) device has smaller max-packet sizes than expected (or when doing descriptor fuzz testing). Add the missing sanity checks to probe().

Уязвимость компонента ni_usb6501 ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

ALT-PU-2021-5039: package `kernel-image-un-def` update to version 5.14.18-alt1

ALT-PU-2021-5010: package `kernel-image-std-def` update to version 5.10.79-alt1

ALT-PU-2021-4867: package `kernel-image-un-def` update to version 5.14.18-alt1

ALT-PU-2021-3306: package `kernel-image-std-kvm` update to version 5.10.80-alt1

ALT-PU-2021-3330: package `kernel-image-mp` update to version 5.15.4-alt1

Множественные уязвимости kernel-lt

ALT-PU-2021-3309: package `kernel-image-std-def` update to version 5.10.79-alt1

ALT-PU-2021-3618: package `kernel-image-rt` update to version 5.10.87-alt1.rt59

ALT-PU-2021-3458: package `kernel-image-rpi-def` update to version 5.10.81-alt1

ALT-PU-2021-3451: package `kernel-image-rpi-def` update to version 5.10.81-alt1

ALT-PU-2022-7822: package `kernel-image-xenomai` update to version 4.19.229-alt1.cip67.21

Security update for the Linux Kernel

ALT-PU-2022-1428: package `kernel-image-rt` update to version 5.10.100-alt1.rt62

ALT-PU-2022-2096: package `kernel-image-xenomai` update to version 4.19.229-alt1.cip67.21