In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access. To avoid any such logic errors causing out of bounds memory accesses, this commit factors out all accesses to the per-host bulk flow counters to a series of helpers that perform bounds-checking before any increments and decrements. This also has the benefit of improving rea...
In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access. To avoid any such logic errors causing out of bounds memory accesses, this commit factors out all accesses to the per-host bulk flow counters to a series of helpers that perform bounds-checking before any increments and decrements. This also has the benefit of improving rea...
영향 제품·버전
제품 Linux Linux, SIMATIC S7-1500 TM MFP - BIOS, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
제3자 참조와 수정 버전 값(5.4.291, 5.10.235, 5.15.179, 6.1.125, 6.6.72, 6.11, 6.12.10)은 보조 근거로만 사용하고, 공급사 공식 보안 권고에서 조치 기준을 재확인합니다.
조치 후 확인사항
패치 후 같은 명령으로 전체 버전을 다시 확인해 Linux Linux, SIMATIC S7-1500 TM MFP - BIOS, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 5.4.291, 5.10.235, 5.15.179, 6.1.125, 6.6.72, 6.11, 6.12.10 기준을 충족하는지 확인합니다. 이어서 메모리 손상 관련 오류·공격 흔적이 새로 발생하지 않는지 확인합니다.