page-cache-corruption-lpes

페이지 캐시 손상 LPE Linux 커널 로컬 권한 상승 익스플로잇 3종. Dirty COW 및 Dirty Pipe와 동일한 버그 클래스. 몇 초 만에 루트 셸. 모든 주요 배포판이 영향받음. 세 익스플로잇 모두 커널의 페이지 캐시 — 프로세스가 실제로 읽고 실행하는 파일의 메모리 내 복사본 — 를 손상시킵니다. 디스크의 파일은 절대 건드리지 않습니다. 파일 무결성 도구는 아무것도 감지하지 못합니다. execve"/usr/bin/su"가 캐시에서 로드 → 셸코드 실행 → root. 익스플로잇 익스플로잇| CVE| 메커니즘|...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: veth: The GRO flag is cleared when XDP is disabled, even when the device is disabled. The NETIFFGRO flag is set automatically when XDP is enabled, because both features use the same NAPI mechanism. The logic for clearing the...

UBUNTU-CVE-2024-26803

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIFFGRO automatically when XDP is enabled, because both features use the same NAPI machinery. The logic to clear NETIFFGRO sits in vethdisablexdp which is called...

CVE-2024-26803 net: veth: clear GRO when clearing XDP even when down

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIFFGRO automatically when XDP is enabled, because both features use the same NAPI machinery. The logic to clear NETIFFGRO sits in vethdisablexdp which is called...

CVE-2024-26803: Incomplete Cleanup

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIFFGRO automatically when XDP is enabled, because both features use the same NAPI machinery. The logic to clear NETIFFGRO sits in vethdisablexdp which is called...

CVE-2024-26803

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIFFGRO automatically when XDP is enabled, because both features use the same NAPI machinery. The logic to clear NETIFFGRO sits in vethdisablexdp which is called...

PT-2024-7731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the Linux kernel's virtual Ethernet veth component. When XDP eXpress Data Path is enabled, veth sets the NETIF F GRO flag automatically because both...