USN-5940-1 linux-raspi-5.4 vulnerabilities

It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...

PT-2024-11862 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0-rc7 Description: A slab-out-of-bounds access was reported in the fib nh match function. The issue occurs when attempting to delete a multipath route while the fib info contains an nh reference. Separate...