Поиск уязвимостей
Количество 19
Количество 19
CVE-2022-48637
In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxt_tx_int() hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run before the rest of our code and free the skb, leading to a use-after-free. Since dev_kfree_skb_any() accepts NULL make the loss of ownership more obvious and set skb to NULL.
CVE-2022-48637
In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxt_tx_int() hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run before the rest of our code and free the skb, leading to a use-after-free. Since dev_kfree_skb_any() accepts NULL make the loss of ownership more obvious and set skb to NULL.
CVE-2022-48637
In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxt_tx_int() hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run before the rest of our code and free the skb, leading to a use-after-free. Since dev_kfree_skb_any() accepts NULL make the loss of ownership more obvious and set skb to NULL.
CVE-2022-48637
In the Linux kernel, the following vulnerability has been resolved: b ...
GHSA-whgw-qcmx-gp47
In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxt_tx_int() hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run before the rest of our code and free the skb, leading to a use-after-free. Since dev_kfree_skb_any() accepts NULL make the loss of ownership more obvious and set skb to NULL.
BDU:2024-10023
Уязвимость компонента bnxt ядра операционной системы Linux, позволяющая нарушителю повысить привилегии в системе
ALT-PU-2022-7813
ALT-PU-2022-7813: package `kernel-image-std-def` update to version 5.15.71-alt1
ALT-PU-2022-7704
ALT-PU-2022-7704: package `kernel-image-un-def` update to version 5.15.71-alt1
ALT-PU-2022-2864
ALT-PU-2022-2864: package `kernel-image-rpi-def` update to version 5.15.73-alt1
ALT-PU-2022-2844
ALT-PU-2022-2844: package `kernel-image-rpi-def` update to version 5.15.73-alt1
ROS-20241105-01
Множественные уязвимости kernel-lt
ALT-PU-2022-7837
ALT-PU-2022-7837: package `kernel-image-un-def` update to version 5.19.12-alt1
SUSE-SU-2024:1641-1
Security update for the Linux Kernel
ALT-PU-2022-2691
ALT-PU-2022-2691: package `kernel-image-mp` update to version 5.19.12-alt1
SUSE-SU-2024:1644-1
Security update for the Linux Kernel
SUSE-SU-2024:1659-1
Security update for the Linux Kernel
SUSE-SU-2024:1663-1
Security update for the Linux Kernel
ALT-PU-2022-2919
ALT-PU-2022-2919: package `kernel-image-rpi-un` update to version 6.0.2-alt1
ALT-PU-2022-2915
ALT-PU-2022-2915: package `kernel-image-rpi-un` update to version 6.0.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-48637 In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxt_tx_int() hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run before the rest of our code and free the skb, leading to a use-after-free. Since dev_kfree_skb_any() accepts NULL make the loss of ownership more obvious and set skb to NULL. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад | |
CVE-2022-48637 In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxt_tx_int() hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run before the rest of our code and free the skb, leading to a use-after-free. Since dev_kfree_skb_any() accepts NULL make the loss of ownership more obvious and set skb to NULL. | CVSS3: 7 | 0% Низкий | больше 2 лет назад | |
CVE-2022-48637 In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxt_tx_int() hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run before the rest of our code and free the skb, leading to a use-after-free. Since dev_kfree_skb_any() accepts NULL make the loss of ownership more obvious and set skb to NULL. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад | |
CVE-2022-48637 In the Linux kernel, the following vulnerability has been resolved: b ... | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад | |
GHSA-whgw-qcmx-gp47 In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is required bnxt_tx_int() hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run before the rest of our code and free the skb, leading to a use-after-free. Since dev_kfree_skb_any() accepts NULL make the loss of ownership more obvious and set skb to NULL. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад | |
BDU:2024-10023 Уязвимость компонента bnxt ядра операционной системы Linux, позволяющая нарушителю повысить привилегии в системе | CVSS3: 8.8 | 0% Низкий | около 4 лет назад | |
ALT-PU-2022-7813 ALT-PU-2022-7813: package `kernel-image-std-def` update to version 5.15.71-alt1 | CVSS3: 8.8 | около 4 лет назад | ||
ALT-PU-2022-7704 ALT-PU-2022-7704: package `kernel-image-un-def` update to version 5.15.71-alt1 | CVSS3: 8.8 | около 4 лет назад | ||
ALT-PU-2022-2864 ALT-PU-2022-2864: package `kernel-image-rpi-def` update to version 5.15.73-alt1 | CVSS3: 8.8 | около 4 лет назад | ||
ALT-PU-2022-2844 ALT-PU-2022-2844: package `kernel-image-rpi-def` update to version 5.15.73-alt1 | CVSS3: 8.8 | около 4 лет назад | ||
ROS-20241105-01 Множественные уязвимости kernel-lt | CVSS3: 8.8 | около 2 лет назад | ||
ALT-PU-2022-7837 ALT-PU-2022-7837: package `kernel-image-un-def` update to version 5.19.12-alt1 | CVSS3: 9.8 | около 4 лет назад | ||
SUSE-SU-2024:1641-1 Security update for the Linux Kernel | больше 2 лет назад | |||
ALT-PU-2022-2691 ALT-PU-2022-2691: package `kernel-image-mp` update to version 5.19.12-alt1 | CVSS3: 9.8 | около 4 лет назад | ||
SUSE-SU-2024:1644-1 Security update for the Linux Kernel | больше 2 лет назад | |||
SUSE-SU-2024:1659-1 Security update for the Linux Kernel | больше 2 лет назад | |||
SUSE-SU-2024:1663-1 Security update for the Linux Kernel | больше 2 лет назад | |||
ALT-PU-2022-2919 ALT-PU-2022-2919: package `kernel-image-rpi-un` update to version 6.0.2-alt1 | CVSS3: 10 | около 4 лет назад | ||
ALT-PU-2022-2915 ALT-PU-2022-2915: package `kernel-image-rpi-un` update to version 6.0.2-alt1 | CVSS3: 10 | около 4 лет назад |
Уязвимостей на страницу