PT-2024-41455

Уязвимость функции rose kill by device в модуле net/rose/af rose.c реализации протокола Amateur Radio X.25 PLP Rose ядра операционной системы Linux связана с выходом за пределы выделенного на стеке буфера. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальност...

PT-2023-8122

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.8 Description The issue is related to the rose ioctl function in the net/rose/af rose.c module of the Linux kernel, which implements the Amateur Radio X.25 PLP Rose protocol. It is caused by a use-after-free...

PT-2013-1111

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the rose recvmsg function in net/rose/af rose.c not initializing a certain data structure,...