OESA-2024-1142

Dashboard / Vulnerabilities / OESA-2024-1142

OESA-2024-1142

Summary: kernel security update

Details: The Linux Kernel, the operating system core itself. Security Fix(es): In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.(CVE-2023-51043) A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.(CVE-2023-6531) A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.(CVE-2023-6915)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1142, https://nvd.nist.gov/vuln/detail/CVE-2023-51043, https://nvd.nist.gov/vuln/detail/CVE-2023-6531, https://nvd.nist.gov/vuln/detail/CVE-2023-6915