11 matches found
copyfail2_electric_boogaloo_fix
copyfail2electricboogaloofix 针对 copyfail 变种(copyfail2electricboogaloo)的临时缓解措施——无特权 Linux LPE,通过 xfrm ESP-in-UDP MSGSPLICEPAGES no-COW 快速路径实现。将数据写入任意可读文件的页面缓存中。将 /etc/passwd 中的 nologin 行覆盖为 sick::0:0:…:/:/bin/bash 并 su 进去。与 Copy Fail(CVE-2026-31431)属于同一类,但子系统不同。 重要提示: 在 /etc/modprobe.d...
CVE-2026-31431
CopyFail2 CVE-2026-31431 - पायथन कार्यान्वयन xfrm ESP-in-UDP MSGSPLICEPAGES no-COW फास्ट पथ का लाभ उठाने वाले CopyFail2 कर्नेल एक्सप्लॉइट का पायथन पोर्ट, जो विशेषाधिकार-रहित Linux स्थानीय विशेषाधिकार वृद्धि के लिए उपयोग होता है। /etc/passwd में एक nologin/false प्रविष्टि को पासवर्ड-रहित uid-0...
VulnCheck KEV: CVE-2026-53362
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In ip6appenddata, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen;...
CVE-2024-53094
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Add sendpageok check to disable MSGSPLICEPAGES While running ISER over SIW, the initiator machine encounters a warning from skbsplicefromiter indicating that a slab page is being used in sendpage. To address this, it is...
CVE-2024-53094
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Add sendpageok check to disable MSGSPLICEPAGES While running ISER over SIW, the initiator machine encounters a warning from skbsplicefromiter indicating that a slab page is being used in sendpage. To address this, it is...
CVE-2024-53094 RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Add sendpageok check to disable MSGSPLICEPAGES While running ISER over SIW, the initiator machine encounters a warning from skbsplicefromiter indicating that a slab page is being used in sendpage. To address this, it is...
CVE-2024-53094
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Add sendpageok check to disable MSGSPLICEPAGES While running ISER over SIW, the initiator machine encounters a warning from skbsplicefromiter indicating that a slab page is being used in sendpage. To address this, it is...
CVE-2024-53094 RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Add sendpageok check to disable MSGSPLICEPAGES While running ISER over SIW, the initiator machine encounters a warning from skbsplicefromiter indicating that a slab page is being used in sendpage. To address this, it is...
CVE-2024-53094
CVE-2024-53094 affects the Linux kernel RDMA/siw driver (InfiniBand) where siw_tcp_sendpages/siw_qp_tx.c processing can mishandle sendpage/MSG_SPLICE_PAGES, caused by insufficient input validation. The published fix adds a sendpage_ok() check to disable MSG_SPLICE_PAGES before entering the networ...
CVE-2024-35841
A vulnerability was found in the Linux kernel's Transport Layer Security TLS implementation, specifically involving a warning triggered in the skmsgfree function. This issue is related to improper resource cleanup, and could result in unnecessary warnings or potential memory management problems...
CVE-2024-35841
In the Linux kernel, the following vulnerability has been resolved: net: tls, fix WARNIING in skmsgfree A splice with MSGSPLICEPAGES will cause tls code to use the tlsswsendmsgsplice path in the TLS sendmsg code to move the user provided pages from the msg into the msgpl. This will loop over the...