Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly free cache in the nfsd subsystem when xdrreservespace returns NULL, which could lead t...

ROS-20241011-01

A vulnerability in the NFSD component of the Linux operating system kernel is related to a READDIR buffer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the dbgfs component of the Linux operating system kernel is related to...

CentOS 9 : kernel-5.14.0-513.el9

"The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-513.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: Fix potential null pointer dereference In...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

The vulnerability of the nfsd component in Linux operating systems, related to the assignment of NULL pointers, allows a hacker to trigger a service failure.

The vulnerability of the nfsd component in Linux operating systems is related to the assignment of NULL pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-46697

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that nfsd4fattrargs.context is zeroed out If nfsd4encodefattr4 ends up doing a "goto out" before we get to checking for the security label, then args.context will be set to uninitialized junk on the stack, which we'l...

CVE-2024-46696

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4cbgetattrrelease Once we drop the delegation reference, the fields embedded in it are no longer safe to access. Do that last...

CVE-2024-46690

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd4deleggetattrconflict in presence of third party lease It is not safe to dereference fl-c.flcowner without first confirming fl-fllmops is the expected manager. nfsd4deleggetattrconflict tests fllmops but largely...

CVE-2024-46682

In the Linux kernel, the following vulnerability has been resolved: nfsd: prevent panic for nfsv4.0 closed files in nfs4showopen Prior to commit 3f29cc82a84c "nfsd: split scstatus out of sctype" statesshow relied on sctype field to be of valid type before calling into a subfunction to show conten...

CVE-2024-46696

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4cbgetattrrelease Once we drop the delegation reference, the fields embedded in it are no longer safe to access. Do that last...

CVE-2024-46690

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd4deleggetattrconflict in presence of third party lease It is not safe to dereference fl-c.flcowner without first confirming fl-fllmops is the expected manager. nfsd4deleggetattrconflict tests fllmops but largely...

CVE-2024-46697 nfsd: ensure that nfsd4_fattr_args.context is zeroed out

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that nfsd4fattrargs.context is zeroed out If nfsd4encodefattr4 ends up doing a "goto out" before we get to checking for the security label, then args.context will be set to uninitialized junk on the stack, which we'l...

CVE-2024-46696

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4cbgetattrrelease Once we drop the delegation reference, the fields embedded in it are no longer safe to access. Do that last...

CVE-2024-46696 nfsd: fix potential UAF in nfsd4_cb_getattr_release

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4cbgetattrrelease Once we drop the delegation reference, the fields embedded in it are no longer safe to access. Do that last...

CVE-2024-46697

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that nfsd4fattrargs.context is zeroed out If nfsd4encodefattr4 ends up doing a "goto out" before we get to checking for the security label, then args.context will be set to uninitialized junk on the stack, which we'l...

CVE-2024-46697 nfsd: ensure that nfsd4_fattr_args.context is zeroed out

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that nfsd4fattrargs.context is zeroed out If nfsd4encodefattr4 ends up doing a "goto out" before we get to checking for the security label, then args.context will be set to uninitialized junk on the stack, which we'l...

CVE-2024-46697

The CVE-2024-46697 issue in the Linux kernel’s nfsd path (nfsd4_fattr_args.context) is fixed: if a goto out path executes before security label checks, an uninitialized args.context on the stack could be freed. The mitigation is to zero/initialize args.context early, preventing a use-after-free/M...

CVE-2024-46697 nfsd: ensure that nfsd4_fattr_args.context is zeroed out

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that nfsd4fattrargs.context is zeroed out If nfsd4encodefattr4 ends up doing a "goto out" before we get to checking for the security label, then args.context will be set to uninitialized junk on the stack, which we'l...

CVE-2024-46690 nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd4deleggetattrconflict in presence of third party lease It is not safe to dereference fl-c.flcowner without first confirming fl-fllmops is the expected manager. nfsd4deleggetattrconflict tests fllmops but largely...

CVE-2024-46690 nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd4deleggetattrconflict in presence of third party lease It is not safe to dereference fl-c.flcowner without first confirming fl-fllmops is the expected manager. nfsd4deleggetattrconflict tests fllmops but largely...