Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering the winchIRQ. Registering a winchIRQ can lead to a race condition; an interrupt may occur before the winch is added to the winchhandlers list. If this happens, registerwinchirq ad...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39292)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39292 advisory. - In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before...

A Bootiful Podcast: Spring Security lead Rob Winch on the amazing Spring Security 6.4 release

Hi, Spring fans! In this installment, we'll talk to the amazing Rob Winch, lead of Spring Security 6.4, about the jam-packed new release! spring springboot security java...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12581)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12581 advisory. - net/mlx5e: drop shorter ethernet frames Manjunath Patil Orabug: 36879157 CVE-2024-41090 CVE-2024-41091 - netfilter: ipset: Fix race between...

um: Add winch to winch_handlers before registering winch IRQ

...

Spring Tips: Spring Security method security with special guest Rob Winch

Hi, Spring fans! In this installment I have special guest Spring Security lead Rob Winch give us a master class in how the method security support works and some of its new features. Come for the security, stay for the incredible opportunity to look over a senior engineer's shoulders as he explai...

SUSE CVE-2024-39292

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...

CVE-2024-39292

A vulnerability was found in the Linux kernel's handling of winch IRQs. This issue involves the registration of winch IRQs before adding winch handlers to the winchhandlers list. This oversight could potentially lead to improper IRQ handling and impact system stability or security. This issue has...

CVE-2024-39292

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...

AZL-42889 CVE-2024-39292 affecting package kernel for versions less than 6.6.35.1-4

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...

DEBIAN-CVE-2024-39292

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...

AZL-42937 CVE-2024-39292 affecting package kernel for versions less than 5.15.162.2-1

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...

UBUNTU-CVE-2024-39292

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...

CVE-2024-39292 um: Add winch to winch_handlers before registering winch IRQ

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...

CVE-2024-39292

The CVE describes a race in the Linux kernel where registering a winch IRQ could occur before the winch is added to winch_handlers, risking a panic during winch_cleanup if the IRQ is scheduled for a freed winch. The confirmed fix, as detailed in connected advisories, is to add the winch to winch_...

CVE-2024-39292 um: Add winch to winch_handlers before registering winch IRQ

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which arises from a competing registration of winch IRQs, resulting in an interrupt if a winch is registered before it is...

A Bootiful Podcast: Spring Security lead Rob Winch

Hi, Spring fans! Welcome to another installment of a Bootiful Podcast. In this interview, Josh Long @starbuxman talks to Spring Security legend and lead Rob Winch @robwinch, recorded live from SpringOne 2023!...

CVE-2011-2731: Spring Security privilege escalation when using RunAsManager

CVE-2011-2731: Spring Security privilege escalation when using RunAsManager Severity: Moderate Versions Affected: 2.0.0 to 2.0.6 3.0.0 to 3.0.5 Earlier versions may also be affected Description: Spring Security provides a mechanism RunAsManager to allow particular operations to run with a differe...