ALT-PU-2022-2569-1

Package update kernel-image-centos in branch sisyphus

Version5.14.0.162-alt1.el9

Published2022-09-06

Max severityHIGH

Severity:

Closed issues (2)

HIGH7.8

Уязвимость компонента POSIX CPU ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код

Published: 2022-09-09Modified: 2024-09-30

CVSS 3.xHIGH 7.8

CVSS:3.x/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0MEDIUM 6.8

CVSS:2.0/AV:L/AC:L/Au:S/C:C/I:C/A:C

References

CVE-2022-2585

HIGH7.8

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.

Published: 2024-01-08Modified: 2024-11-21

CVSS 3.xHIGH 7.8

CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References