Jądro Linux vulnerabilities

A vulnerability related to use-after-free (UAF) in the le_read_features_complete function has been fixed in the Linux kernel, which could lead to memory management errors.

The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking.

The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) by triggering use of the GRO path for large crafted packets, as demonstrated by packets that contain only VLAN headers.

The IPv4 implementation in the Linux kernel before version 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, allowing remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets.

In the Linux kernel before version 4.5, there is a vulnerability that allows remote attackers to execute arbitrary code via UDP traffic. This issue occurs during an unsafe second checksum calculation during the execution of a recv system call with the MSG_PEEK flag.

The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.

The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, allowing local users to cause a denial of service by requesting a large number of sockets.