Поиск уязвимостей
Количество 29
Количество 29
CVE-2023-52757
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock*
CVE-2023-52757
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock*
CVE-2023-52757
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock*
CVE-2023-52757
smb: client: fix potential deadlock when releasing mids
CVE-2023-52757
In the Linux kernel, the following vulnerability has been resolved: s ...
GHSA-jp9q-c7f4-2fxf
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock*
BDU:2025-04678
Уязвимость функции cifs_compose_mount_options() модуля fs/smb/client/cifsproto.h поддержки клиента SMB ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании.
ROS-20251023-01
Множественные уязвимости kernel-lt
ALT-PU-2023-8823
ALT-PU-2023-8823: package `kernel-image-std-def` update to version 6.1.64-alt1
ALT-PU-2023-8577
ALT-PU-2023-8577: package `kernel-image-un-def` update to version 6.1.65-alt1
SUSE-SU-2024:2381-1
Security update for the Linux Kernel
ALT-PU-2023-8892
ALT-PU-2023-8892: package `kernel-image-un-def` update to version 6.5.13-alt1
SUSE-SU-2024:2360-1
Security update for the Linux Kernel
ELSA-2025-20470
ELSA-2025-20470: Unbreakable Enterprise kernel security update (IMPORTANT)
ALT-PU-2023-8700
ALT-PU-2023-8700: package `kernel-image-pine` update to version 6.6.3-alt1
SUSE-SU-2024:2561-1
Security update for the Linux Kernel
ALT-PU-2023-7838
ALT-PU-2023-7838: package `kernel-image-mp` update to version 6.6.4-alt1
ALT-PU-2023-7750
ALT-PU-2023-7750: package `kernel-image-rt` update to version 6.1.64-alt1.rt17
ALT-PU-2025-6606
ALT-PU-2025-6606: package `kernel-image-rt` update to version 5.10.237-alt1.rt131
ALT-PU-2025-6382
ALT-PU-2025-6382: package `kernel-image-std-def` update to version 5.10.237-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-52757 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock* | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
 | CVE-2023-52757 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock* | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | CVE-2023-52757 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock* | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
 | CVE-2023-52757 smb: client: fix potential deadlock when releasing mids | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| CVE-2023-52757 In the Linux kernel, the following vulnerability has been resolved: s ... | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
| GHSA-jp9q-c7f4-2fxf In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock* | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
 | BDU:2025-04678 Уязвимость функции cifs_compose_mount_options() модуля fs/smb/client/cifsproto.h поддержки клиента SMB ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании. | CVSS3: 7.8 | 0% Низкий | около 3 лет назад |
 | ROS-20251023-01 Множественные уязвимости kernel-lt | CVSS3: 8.1 | около 1 года назад | |
| ALT-PU-2023-8823 ALT-PU-2023-8823: package `kernel-image-std-def` update to version 6.1.64-alt1 | CVSS3: 9.8 | почти 3 года назад | |
| ALT-PU-2023-8577 ALT-PU-2023-8577: package `kernel-image-un-def` update to version 6.1.65-alt1 | CVSS3: 9.8 | почти 3 года назад | |
 | SUSE-SU-2024:2381-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| ALT-PU-2023-8892 ALT-PU-2023-8892: package `kernel-image-un-def` update to version 6.5.13-alt1 | CVSS3: 9.8 | почти 3 года назад | |
| SUSE-SU-2024:2360-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| ELSA-2025-20470 ELSA-2025-20470: Unbreakable Enterprise kernel security update (IMPORTANT) | больше 1 года назад | ||
| ALT-PU-2023-8700 ALT-PU-2023-8700: package `kernel-image-pine` update to version 6.6.3-alt1 | CVSS3: 9.8 | почти 3 года назад | |
| SUSE-SU-2024:2561-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| ALT-PU-2023-7838 ALT-PU-2023-7838: package `kernel-image-mp` update to version 6.6.4-alt1 | CVSS3: 9.8 | почти 3 года назад | |
| ALT-PU-2023-7750 ALT-PU-2023-7750: package `kernel-image-rt` update to version 6.1.64-alt1.rt17 | CVSS3: 9.8 | почти 3 года назад | |
| ALT-PU-2025-6606 ALT-PU-2025-6606: package `kernel-image-rt` update to version 5.10.237-alt1.rt131 | CVSS3: 7.8 | больше 1 года назад | |
| ALT-PU-2025-6382 ALT-PU-2025-6382: package `kernel-image-std-def` update to version 5.10.237-alt1 | CVSS3: 7.8 | больше 1 года назад |
Уязвимостей на страницу