ALT-PU-2020-1891-1
Package kernel-image-un-def updated to version 4.19.118-alt0.M80P.1 for branch p8 in task 250551.
Closed vulnerabilities
BDU:2021-02579
Уязвимость функции idle_book3s ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2022-03144
Уязвимость функции route4_change() (net/sched/cls_route.c) ядра операционной системы Linux, позволяющая нарушителю получить доступ к конфиденциальной информации или вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2020-11669
An issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc/kernel/idle_book3s.S does not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR, aka CID-53a712bae5dd.
- openSUSE-SU-2020:0543
- RHSA-2019:3517
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=53a712bae5dd919521a58d7bad773b949358add0
- https://github.com/torvalds/linux/commit/53a712bae5dd919521a58d7bad773b949358add0
- https://lists.ozlabs.org/pipermail/linuxppc-dev/2020-April/208660.html
- https://lists.ozlabs.org/pipermail/linuxppc-dev/2020-April/208661.html
- https://lists.ozlabs.org/pipermail/linuxppc-dev/2020-April/208663.html
- https://security.netapp.com/advisory/ntap-20200430-0001/
- USN-4363-1
- USN-4368-1
- openSUSE-SU-2020:0543
- USN-4368-1
- USN-4363-1
- https://security.netapp.com/advisory/ntap-20200430-0001/
- https://lists.ozlabs.org/pipermail/linuxppc-dev/2020-April/208663.html
- https://lists.ozlabs.org/pipermail/linuxppc-dev/2020-April/208661.html
- https://lists.ozlabs.org/pipermail/linuxppc-dev/2020-April/208660.html
- https://github.com/torvalds/linux/commit/53a712bae5dd919521a58d7bad773b949358add0
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=53a712bae5dd919521a58d7bad773b949358add0
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2
- RHSA-2019:3517
Modified: 2024-11-21
CVE-2021-3715
A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading to a use-after-free condition. This flaw allows unprivileged local users to escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.