35 matches found
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a cyclic lock dependence in the rdstcptune function, potentially leading to deadlocks...
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50347: mmc: rtsxusbsdmmc: fix return value check of mmcaddhost bsc1249928. CVE-2022-50580: blk-throttle: prevent overflow while calculating wait time bsc1252542...
EUVD-2022-55729
In the Linux kernel, the following vulnerability has been resolved: net: rds: don't hold sock lock when cancelling work from rdstcpresetcallbacks syzbot is reporting lockdep warning at rdstcpresetcallbacks 1, for commit ac3615e7f3cffe2a "RDS: TCP: Reduce code duplication in rdstcpresetcallbacks"...
CVE-2022-50676 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
In the Linux kernel, the following vulnerability has been resolved: net: rds: don't hold sock lock when cancelling work from rdstcpresetcallbacks syzbot is reporting lockdep warning at rdstcpresetcallbacks 1, for commit ac3615e7f3cffe2a "RDS: TCP: Reduce code duplication in rdstcpresetcallbacks"...
The vulnerability of the rds_tcp_sysctl_reset() function in the net/rds/tcp.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the rdstcpsysctlreset function in the net/rds/tcp.c module, which implements networking functions in the Linux kernel, is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2019-8396
Malware in sbrugna...
CVE-2024-26865
In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsktimerhandler. syzkaller reported a warning of netns tracker 0 followed by KASAN splat 1 and another ref tracker warning 1. syzkaller could not find a repro, but in the log, the only...
AZL-54972 CVE-2024-26865 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsktimerhandler. syzkaller reported a warning of netns tracker 0 followed by KASAN splat 1 and another ref tracker warning 1. syzkaller could not find a repro, but in the log, the only...
CVE-2024-26865
In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsktimerhandler. syzkaller reported a warning of netns tracker 0 followed by KASAN splat 1 and another ref tracker warning 1. syzkaller could not find a repro, but in the log, the only...
CVE-2024-26865 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsktimerhandler. syzkaller reported a warning of netns tracker 0 followed by KASAN splat 1 and another ref tracker warning 1. syzkaller could not find a repro, but in the log, the only...
CVE-2024-26865 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsktimerhandler. syzkaller reported a warning of netns tracker 0 followed by KASAN splat 1 and another ref tracker warning 1. syzkaller could not find a repro, but in the log, the only...
GSD-2022-1007526 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
net: rds: don't hold sock lock when cancelling work from rdstcpresetcallbacks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.262 by commi...
Unbreakable Enterprise kernel security update
4.1.12-124.52.4 - IB/core: Only update PKEY and GID caches on respective events Hakon Bugge Orabug: 32816368 - Revert 'Allow mce to reset instead of panic on UE' William Roche Orabug: 32820278 - Bluetooth: verify AMP hcichan before ampdestroy Archie Pusaka Orabug: 32912103 CVE-2021-33034 -...
Linux kernel null pointer dereference vulnerability (CNVD-2019-42388)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A null pointer dereference vulnerability exists in rdstcpkillsock in net/rds/tcp.c in the Linux kernel. An attacker...