kernel: inet: fully convert sk->sk_rx_dst to RCU rules

A use-after-free vulnerability was found in the TCP IP protocol in the Linux Kernel, where a delete operation of the RCU-protected pointer is supposed to clear the pointer before the callrcu/synchronizercu guarding the actual memory freeing. This flaw allows a local attacker to crash the system o...

PT-2024-8452 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free error in the kobject del function, which can be caused by a double free of kmem cache. This error occurs when the slub debug test is run with t...

OESA-2022-1838 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In rcucblistdequeue of rcusegcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not...

SUSE SLES15 Security Update : kernel (Live Patch 18 for SLE 15 SP3) (SUSE-SU-2022:2759-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2759-1 advisory. This update for the Linux Kernel 5.3.18-1503005968 fixes several issues. The following security issues were fixed: - CVE-2022-34918: Fixed a...

The vulnerability in the implementation of the ip_check_mc_rcu() function in the Inet Sockets component of Android kernel allows a perpetrator to escalate their privileges.

The vulnerability of the implementation of the ipcheckmcrcu function in the Inet Sockets component of Android operating systems lies in the use of memory after it is freed due to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2022-32751

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description The issue concerns the cfi slowpath diag RCU usage with cpuidle. It was introduced in version v5.13 and fixed in version v5.15.49. The actual impact and attack plausibility have not yet been...

PT-2022-32553

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue concerns the cfi slowpath diag RCU usage with cpuidle. It was introduced in version v5.13 and fixed in version v5.18.6. The actual impact and attack plausibility have not yet been...

GSD-2022-1003635 rcu-tasks: Fix race in schedule and flush work

rcu-tasks: Fix race in schedule and flush work This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003082 bonding: fix missed rcu protection

bonding: fix missed rcu protection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit 1b66a533c47d29b38af8e05fbb53b609a5ba3a4e, ...

GSD-2022-1002922 mt76: fix use-after-free by removing a non-RCU wcid pointer

mt76: fix use-after-free by removing a non-RCU wcid pointer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002843 rcu-tasks: Fix race in schedule and flush work

rcu-tasks: Fix race in schedule and flush work This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002730 bonding: fix missed rcu protection

bonding: fix missed rcu protection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit 85eed460681da71b359ed906bce4d800081db854, i...

GSD-2022-1002573 mt76: fix use-after-free by removing a non-RCU wcid pointer

mt76: fix use-after-free by removing a non-RCU wcid pointer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31417

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential issue exists due to a race in schedule and flush work in rcu-tasks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31898

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A potential issue exists due to a race in schedule and flush work in rcu-tasks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31106

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential issue exists due to a race in schedule and flush work in rcu-tasks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-30993

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.18.2 Description A potential security issue exists due to missed RCU protection in the bonding module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.13 Description The issue is related to missed RCU protection in bonding. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.17 through...

PT-2022-30836

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a use-after-free error in the mt76 module. This error occurs when a non-RCU wcid pointer is removed. The actual impact and potential for attack have not been proven yet...

PT-2022-31670

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A potential issue exists due to a race in schedule and flush work in rcu-tasks. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...