ALT-PU-2021-1208-1
Package kernel-image-un-def updated to version 5.10.13-alt1 for branch sisyphus in task 265772.
Closed vulnerabilities
BDU:2021-01126
Уязвимость реализации сокетов с адресацией AF_VSOCK ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии
BDU:2021-02591
Уязвимость функции ndb_queue_rq ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код
Modified: 2024-11-21
CVE-2021-26708
A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.
- http://www.openwall.com/lists/oss-security/2021/02/05/6
- http://www.openwall.com/lists/oss-security/2021/04/09/2
- http://www.openwall.com/lists/oss-security/2022/01/25/14
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c518adafa39f37858697ac9309c6cf1805581446
- https://security.netapp.com/advisory/ntap-20210312-0008/
- https://www.openwall.com/lists/oss-security/2021/02/04/5
- http://www.openwall.com/lists/oss-security/2021/02/05/6
- http://www.openwall.com/lists/oss-security/2021/04/09/2
- http://www.openwall.com/lists/oss-security/2022/01/25/14
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c518adafa39f37858697ac9309c6cf1805581446
- https://security.netapp.com/advisory/ntap-20210312-0008/
- https://www.openwall.com/lists/oss-security/2021/02/04/5
Modified: 2024-11-21
CVE-2021-3348
nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.
- http://www.openwall.com/lists/oss-security/2021/02/01/1
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b98e762e3d71e893b221f871825dc64694cfb258
- https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html
- https://www.openwall.com/lists/oss-security/2021/01/28/3
- http://www.openwall.com/lists/oss-security/2021/02/01/1
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b98e762e3d71e893b221f871825dc64694cfb258
- https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html
- https://www.openwall.com/lists/oss-security/2021/01/28/3