WID-SEC-W-2024-0136

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Linux Kernel: Mehrere Schwachstellen

view advisory published 2024-01-17

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder seine Privilegien zu erweitern.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2024-0646UShigh7.8—
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destinatio…
CVE-2024-0641USmedium5.5—
A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem. This flaw allows guests with local user privileges…
CVE-2024-0639USmedium5.5—
A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan