跳转到帖子

Oracle Linux: CVE-2024-46697: ELSA-2024-11486: kernel security update (MODERATE) (Multiple Advisories)

recommended_posts

发布于
  • Members

Oracle Linux: CVE-2024-46697: ELSA-2024-11486:kernel security update (MODERATE) (Multiple Advisories)

Severity
5
CVSS
(AV:L/AC:L/Au:S/C:N/I:N/A:C)
Published
09/13/2024
Created
01/11/2025
Added
01/07/2025
Modified
01/14/2025

Description

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that nfsd4_fattr_args.context is zeroed out If nfsd4_encode_fattr4 ends up doing a "goto out" before we get to checking for the security label, then args.context will be set to uninitialized junk on the stack, which we'll then try to free. Initialize it early.

Solution(s)

  • oracle-linux-upgrade-kernel

References

  • https://attackerkb.com/topics/cve-2024-46697
  • CVE - 2024-46697
  • ELSA-2024-11486
  • 查看数 694
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…