Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unconnected socket occupying an ehash entry when a bhash2 allocation fails...

CVE-2024-26741: Allocation of Resources Without Limits or Throttling

In the Linux kernel, the following vulnerability has been resolved: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after checkestalblished. syzkaller reported a warning 0 in inetcskdestroysock with no repro. WARNONinetsksk-inetnum && !inetcsksk-icskbindhash; However, the syzkaller's log...

PT-2024-21541

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.8.0-rc6-syzkaller-00159-gc055fc00c07b and earlier Description The issue is related to the handling of reference counts in the Linux kernel's TCP connection establishment process. Specifically, when the bhash2 allocation...