Поиск уязвимостей
Количество 28
Количество 28
CVE-2024-57791
In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when draining clc data When receiving clc msg, the field length in smc_clc_msg_hdr indicates the length of msg should be received from network and the value should not be fully trusted as it is from the network. Once the value of length exceeds the value of buflen in function smc_clc_wait_msg it may run into deadloop when trying to drain the remaining data exceeding buflen. This patch checks the return value of sock_recvmsg when draining data in case of deadloop in draining.
CVE-2024-57791
In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when draining clc data When receiving clc msg, the field length in smc_clc_msg_hdr indicates the length of msg should be received from network and the value should not be fully trusted as it is from the network. Once the value of length exceeds the value of buflen in function smc_clc_wait_msg it may run into deadloop when trying to drain the remaining data exceeding buflen. This patch checks the return value of sock_recvmsg when draining data in case of deadloop in draining.
CVE-2024-57791
In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when draining clc data When receiving clc msg, the field length in smc_clc_msg_hdr indicates the length of msg should be received from network and the value should not be fully trusted as it is from the network. Once the value of length exceeds the value of buflen in function smc_clc_wait_msg it may run into deadloop when trying to drain the remaining data exceeding buflen. This patch checks the return value of sock_recvmsg when draining data in case of deadloop in draining.
CVE-2024-57791
In the Linux kernel, the following vulnerability has been resolved: n ...
GHSA-g3r9-3xjg-2vvw
In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when draining clc data When receiving clc msg, the field length in smc_clc_msg_hdr indicates the length of msg should be received from network and the value should not be fully trusted as it is from the network. Once the value of length exceeds the value of buflen in function smc_clc_wait_msg it may run into deadloop when trying to drain the remaining data exceeding buflen. This patch checks the return value of sock_recvmsg when draining data in case of deadloop in draining.
BDU:2025-07839
Уязвимость компонента net/smc/smc_clc.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2025:0771-1
Security update for the Linux Kernel
SUSE-SU-2025:0517-1
Security update for the Linux Kernel
SUSE-SU-2025:0576-1
Security update for the Linux Kernel
ALT-PU-2025-1288
ALT-PU-2025-1288: package `kernel-image-un-def` update to version 6.1.123-alt1
ROS-20250513-03
Множественные уязвимости kernel-lt
ALT-PU-2025-1879
ALT-PU-2025-1879: package `kernel-image-rt` update to version 5.10.233-alt1.rt125
ALT-PU-2025-1059
ALT-PU-2025-1059: package `kernel-image-std-def` update to version 5.10.233-alt1
SUSE-SU-2025:0236-1
Security update for the Linux Kernel
SUSE-SU-2025:0577-2
Security update for the Linux Kernel
SUSE-SU-2025:0577-1
Security update for the Linux Kernel
ALT-PU-2025-3496
ALT-PU-2025-3496: package `kernel-image-6.6` update to version 6.6.69-alt1
ALT-PU-2025-3483
ALT-PU-2025-3483: package `kernel-image-6.12` update to version 6.12.9-alt1
ALT-PU-2025-1256
ALT-PU-2025-1256: package `kernel-image-pine` update to version 6.12.9-alt1
SUSE-SU-2025:0428-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-57791 In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when draining clc data When receiving clc msg, the field length in smc_clc_msg_hdr indicates the length of msg should be received from network and the value should not be fully trusted as it is from the network. Once the value of length exceeds the value of buflen in function smc_clc_wait_msg it may run into deadloop when trying to drain the remaining data exceeding buflen. This patch checks the return value of sock_recvmsg when draining data in case of deadloop in draining. | CVSS3: 7.5 | 1% Низкий | почти 2 года назад | |
CVE-2024-57791 In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when draining clc data When receiving clc msg, the field length in smc_clc_msg_hdr indicates the length of msg should be received from network and the value should not be fully trusted as it is from the network. Once the value of length exceeds the value of buflen in function smc_clc_wait_msg it may run into deadloop when trying to drain the remaining data exceeding buflen. This patch checks the return value of sock_recvmsg when draining data in case of deadloop in draining. | CVSS3: 5.5 | 1% Низкий | почти 2 года назад | |
CVE-2024-57791 In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when draining clc data When receiving clc msg, the field length in smc_clc_msg_hdr indicates the length of msg should be received from network and the value should not be fully trusted as it is from the network. Once the value of length exceeds the value of buflen in function smc_clc_wait_msg it may run into deadloop when trying to drain the remaining data exceeding buflen. This patch checks the return value of sock_recvmsg when draining data in case of deadloop in draining. | CVSS3: 7.5 | 1% Низкий | почти 2 года назад | |
CVE-2024-57791 In the Linux kernel, the following vulnerability has been resolved: n ... | CVSS3: 7.5 | 1% Низкий | почти 2 года назад | |
GHSA-g3r9-3xjg-2vvw In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when draining clc data When receiving clc msg, the field length in smc_clc_msg_hdr indicates the length of msg should be received from network and the value should not be fully trusted as it is from the network. Once the value of length exceeds the value of buflen in function smc_clc_wait_msg it may run into deadloop when trying to drain the remaining data exceeding buflen. This patch checks the return value of sock_recvmsg when draining data in case of deadloop in draining. | CVSS3: 7.5 | 1% Низкий | почти 2 года назад | |
BDU:2025-07839 Уязвимость компонента net/smc/smc_clc.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | почти 2 года назад | |
SUSE-SU-2025:0771-1 Security update for the Linux Kernel | больше 1 года назад | |||
SUSE-SU-2025:0517-1 Security update for the Linux Kernel | больше 1 года назад | |||
SUSE-SU-2025:0576-1 Security update for the Linux Kernel | больше 1 года назад | |||
ALT-PU-2025-1288 ALT-PU-2025-1288: package `kernel-image-un-def` update to version 6.1.123-alt1 | CVSS3: 7.8 | почти 2 года назад | ||
ROS-20250513-03 Множественные уязвимости kernel-lt | CVSS3: 7.8 | больше 1 года назад | ||
ALT-PU-2025-1879 ALT-PU-2025-1879: package `kernel-image-rt` update to version 5.10.233-alt1.rt125 | CVSS3: 8 | почти 2 года назад | ||
ALT-PU-2025-1059 ALT-PU-2025-1059: package `kernel-image-std-def` update to version 5.10.233-alt1 | CVSS3: 8 | почти 2 года назад | ||
SUSE-SU-2025:0236-1 Security update for the Linux Kernel | почти 2 года назад | |||
SUSE-SU-2025:0577-2 Security update for the Linux Kernel | больше 1 года назад | |||
SUSE-SU-2025:0577-1 Security update for the Linux Kernel | больше 1 года назад | |||
ALT-PU-2025-3496 ALT-PU-2025-3496: package `kernel-image-6.6` update to version 6.6.69-alt1 | CVSS3: 7.8 | больше 1 года назад | ||
ALT-PU-2025-3483 ALT-PU-2025-3483: package `kernel-image-6.12` update to version 6.12.9-alt1 | CVSS3: 8 | больше 1 года назад | ||
ALT-PU-2025-1256 ALT-PU-2025-1256: package `kernel-image-pine` update to version 6.12.9-alt1 | CVSS3: 8 | почти 2 года назад | ||
SUSE-SU-2025:0428-1 Security update for the Linux Kernel | больше 1 года назад |
Уязвимостей на страницу