Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Prevent client use-after-free during close_lru reaping
An nfs4_openowner left on nn->close_lru after its final CLOSE keeps
its last closed stateid in oo_last_closed_stid, holding only a raw
pointer to its nfs4_client. The…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
libceph: fix multiple unsafe decodes in decode_locker()
decode_locker() in cls_lock_client.c contains three unsafe decode
operations that allow a malicious or compromised OSD to trigger
slab-out-of-bounds reads:
1.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
libceph: Avoid using invalid osd indices from primary_temp
A corrupted osdmap received from a Ceph monitor or OSD may contain osd
indices in its pg_temp, primary_temp, pg_upmap, and pg_upmap_items parts
that don't exist, i.e.,…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ceph: avoid fs reclaim while using current->journal_info
handle_reply() stores a `ceph_mds_request` pointer in
`current->journal_info` while filling the inode and dentry cache from
an MDS reply.
An allocation in this section…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipvs: clear IPv4 options after rebasing tunnel ICMP errors
ip_vs_in_icmp() rebases an skb from the outer ICMP packet to the
quoted original request before passing it to icmp_send(). However,
IPCB(skb)->opt still describes the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
inet: frags: publish queues before arming timer
inet_frag_create() arms the fragment queue timer before inserting the
queue into the fqdir rhashtable. If the namespace fragment timeout is
zero or negative, the timer can run…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
igbvf: Fix leak in TX DMA error cleanup
If an error is encountered while mapping TX buffers, the driver should
unmap any buffers already mapped for that skb.
Because count is incremented before each frag mapping, it will…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
udp_tunnel_sock_release() could set sk->sk_user_data to NULL
while vxlan_gro_prepare_receive() is running.
Let's check if rcu_dereference_sk_user_data() is…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
addrconf_dad_failure() transitions ifp->state from DAD to POSTDAD
via addrconf_dad_end(), which drops ifp->lock on return. The lock
is re-acquired after…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Prevent client use-after-free during close_lru reaping
An nfs4_openowner left on nn->close_lru after its final CLOSE keeps
its last closed stateid in oo_last_closed_stid, holding only a raw
pointer to its nfs4_client. The…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
libceph: fix multiple unsafe decodes in decode_locker()
decode_locker() in cls_lock_client.c contains three unsafe decode
operations that allow a malicious or compromised OSD to trigger
slab-out-of-bounds reads:
1.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
libceph: Avoid using invalid osd indices from primary_temp
A corrupted osdmap received from a Ceph monitor or OSD may contain osd
indices in its pg_temp, primary_temp, pg_upmap, and pg_upmap_items parts
that don't exist, i.e.,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ceph: avoid fs reclaim while using current->journal_info
handle_reply() stores a `ceph_mds_request` pointer in
`current->journal_info` while filling the inode and dentry cache from
an MDS reply.
An allocation in this section…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipvs: clear IPv4 options after rebasing tunnel ICMP errors
ip_vs_in_icmp() rebases an skb from the outer ICMP packet to the
quoted original request before passing it to icmp_send(). However,
IPCB(skb)->opt still describes the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
inet: frags: publish queues before arming timer
inet_frag_create() arms the fragment queue timer before inserting the
queue into the fqdir rhashtable. If the namespace fragment timeout is
zero or negative, the timer can run…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
igbvf: Fix leak in TX DMA error cleanup
If an error is encountered while mapping TX buffers, the driver should
unmap any buffers already mapped for that skb.
Because count is incremented before each frag mapping, it will…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
udp_tunnel_sock_release() could set sk->sk_user_data to NULL
while vxlan_gro_prepare_receive() is running.
Let's check if rcu_dereference_sk_user_data() is…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
addrconf_dad_failure() transitions ifp->state from DAD to POSTDAD
via addrconf_dad_end(), which drops ifp->lock on return. The lock
is re-acquired after…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki