159 matches found
audit-kernel
Linux 内核审计子系统 https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel Linux 审计子系统提供了一个安全日志框架，用于捕获和记录安全相关事件。它由一个基于系统活动生成审计记录的内核组件、一个将这些记录记录到本地文件或远程聚合服务器的用户空间守护进程，以及一组用于审计日志检查和事后处理的用户空间工具组成。 Linux 内核的主 README 可以在...
CVE-2026-89643
A flaw was found in the Linux kernel's audit subsystem. When fsnotify rules are automatically removed, the system incorrectly manages memory references, leading to a situation where freed memory can be accessed again. This memory corruption vulnerability could allow a local attacker to cause a...
CVE-2026-89643
In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove auditdelrule is used for both netlink deletion templates and internal fsnotify autoremove. The former passes a parsed template which owns a temporary tree reference;...
UBUNTU-CVE-2026-89643
In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove auditdelrule is used for both netlink deletion templates and internal fsnotify autoremove. The former passes a parsed template which owns a temporary tree reference;...
CVE-2026-89643
In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove auditdelrule is used for both netlink deletion templates and internal fsnotify autoremove. The former passes a parsed template which owns a temporary tree reference;...
CVE-2026-89643
In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove auditdelrule is used for both netlink deletion templates and internal fsnotify autoremove. The former passes a parsed template which owns a temporary tree reference;...
CVE-2026-89643 audit: avoid dropping live tree ref on fsnotify rule autoremove
In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove auditdelrule is used for both netlink deletion templates and internal fsnotify autoremove. The former passes a parsed template which owns a temporary tree reference;...
EUVD-2026-76555
In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove auditdelrule is used for both netlink deletion templates and internal fsnotify autoremove. The former passes a parsed template which owns a temporary tree reference;...
CVE-2026-89643 audit: avoid dropping live tree ref on fsnotify rule autoremove
In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove auditdelrule is used for both netlink deletion templates and internal fsnotify autoremove. The former passes a parsed template which owns a temporary tree reference;...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098891)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098891 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qle...
CVE-2026-74512
A flaw was found in the Linux kernel. During the deletion of audit rules, the auditdelrule function prematurely frees a resource while other kernel functions can still access it. This creates a use-after-free vulnerability, which a local attacker could potentially exploit to cause system...
CVE-2026-49426
When auditing a system call executed via ptracePTSCREMOTE, the kernel passed the return value of an internal setup function to AUDITSYSCALLEXIT rather than the actual result of the executed system call. As a result, committed audit records for system calls which returned an error do not reflect t...
Linux Distros Unpatched Vulnerability : CVE-2026-72455
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix uninitialised pointer passed to auditloguntrustedstring Commit 4a134723f9f1 apparmor: move check for aanull file to cover all cases intrdouced a...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101981)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101981 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qle...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099694)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099694 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qle...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100534)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100534 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qle...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099930)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099930 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: fix incorrect inheritable capability in CAPSET records auditlogcapset records the effectiv...
SUSE CVE-2026-74512
In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...
AZL-96540 CVE-2026-74512 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...
UBUNTU-CVE-2026-74512
In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...