Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iouring/net: The overflow check in iorecvmsgmshotprep has been fixed. The controllen variable is of type sizet unsigned long. Casting it to int could lead to an integer underflow. The checkaddoverflow function considers the type ...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35827)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35827 advisory. - In the Linux kernel, the following vulnerability has been resolved: iouring/net: fix overflow check ...

The vulnerability of the `io_recvmsg_mshot_prep()` function in the `io_uring/net.c` module of the `io_uring/net` component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability in the iorecvmsgmshotprep function of the iouring/net.c module of the iouring/net component of the Linux kernel is related to integer overflow in the iorecvmsgmshotprep function. Exploitation of this vulnerability can allow an attacker to cause a service failure...

kernel: io_uring/net: fix overflow check in io_recvmsg_mshot_prep()

In the Linux kernel, the following vulnerability has been resolved: iouring/net: fix overflow check in iorecvmsgmshotprep The Linux kernel CVE team has assigned CVE-2024-35827 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35827-822c@gregkh/T...

io_uring/net: fix overflow check in io_recvmsg_mshot_prep()

...

CVE-2024-35827: Integer Overflow or Wraparound

In the Linux kernel, the following vulnerability has been resolved: iouring/net: fix overflow check in iorecvmsgmshotprep The "controllen" variable is type sizet unsigned long. Casting it to int could lead to an integer underflow. The checkaddoverflow function considers the type of the destinatio...