Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: exthdr: fix 4-byte stack OOB write If priv->len is a multiple of 4, then dst[len / 4] can write past the destination array which leads to stack corruption. This construct is necessary to clean the remainder of the register in case ->len is NOT a multiple of the register size, so make it conditional just like nft_payload.c does. The bug was added in 4.1 cycle and then copied/inherited when tcp/sctp and ip option support was added. Bug reported by Zero Day Initiative project (ZDI-CAN-21950, ZDI-CAN-21951, ZDI-CAN-21961).

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: exthdr: fix 4-byte stack OOB write If priv->len is a multiple of 4, then dst[len / 4] can write past the destination array which leads to stack corruption. This construct is necessary to clean the remainder of the register in case ->len is NOT a multiple of the register size, so make it conditional just like nft_payload.c does. The bug was added in 4.1 cycle and then copied/inherited when tcp/sctp and ip option support was added. Bug reported by Zero Day Initiative project (ZDI-CAN-21950, ZDI-CAN-21951, ZDI-CAN-21961).

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: exthdr: fix 4-byte stack OOB write If priv->len is a multiple of 4, then dst[len / 4] can write past the destination array which leads to stack corruption. This construct is necessary to clean the remainder of the register in case ->len is NOT a multiple of the register size, so make it conditional just like nft_payload.c does. The bug was added in 4.1 cycle and then copied/inherited when tcp/sctp and ip option support was added. Bug reported by Zero Day Initiative project (ZDI-CAN-21950, ZDI-CAN-21951, ZDI-CAN-21961).

In the Linux kernel, the following vulnerability has been resolved: n ...

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: exthdr: fix 4-byte stack OOB write If priv->len is a multiple of 4, then dst[len / 4] can write past the destination array which leads to stack corruption. This construct is necessary to clean the remainder of the register in case ->len is NOT a multiple of the register size, so make it conditional just like nft_payload.c does. The bug was added in 4.1 cycle and then copied/inherited when tcp/sctp and ip option support was added. Bug reported by Zero Day Initiative project (ZDI-CAN-21950, ZDI-CAN-21951, ZDI-CAN-21961).

Уязвимость функции optlen() модуля net/netfilter/nft_exthdr.c компонента netfilter ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP4)

Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP4)

Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)

Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP3)

Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

ALT-PU-2023-8817: package `kernel-image-std-def` update to version 6.1.54-alt1

ALT-PU-2023-8572: package `kernel-image-un-def` update to version 6.1.54-alt1

ELSA-2024-12606: Unbreakable Enterprise kernel security update (IMPORTANT)

ALT-PU-2023-8487: package `kernel-image-std-def` update to version 5.10.198-alt1

Множественные уязвимости kernel-lt

ALT-PU-2023-8593: package `kernel-image-rt` update to version 5.10.199-alt1.rt97