[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2LIVEPATCH-2020-018 --- kernel-livepatch-4.14.177-139.253

ID: oval:org.secpod.oval:def:1700481Date: (C)2020-11-24   (M)2024-04-17
Class: PATCHFamily: unix




In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call

Platform:
Amazon Linux 2
Product:
kernel-livepatch-4.14.177-139.253
Reference:
ALAS2LIVEPATCH-2020-018
CVE-2019-19319
CVE    1
CVE-2019-19319

© SecPod Technologies