FYI people: A serious security issue was discovered in the NVIDIA driver. So all 14.04 and 15.04 customers with NVIDIA will need to get the next Ubuntu update: http://www.ubuntu.com/usn/usn-2747-1/
We will be shipping this new version on all machines starting tomorrow.
We will be shipping this new version on all machines starting tomorrow.
Forwarded from Cybersecurity & Co. 🇺🇦
Тут обнаружена уязвимость, которая делает уязвимым любой дистрибутив Linux с непропатченным systemd.
Подробнее на Threatpost:
https://threatpost.ru/linux-systemd-bug-could-have-led-to-crash-code-execution/21808/
Подробнее на Threatpost:
https://threatpost.ru/linux-systemd-bug-could-have-led-to-crash-code-execution/21808/
Threatpost
Linux Systemd Bug Could Have Led to Crash, Code Execution
Ubuntu fixed a Linux bug that could have let an attacker cause a denial of service or execute arbitrary code with a TCP payload this week.
In this small article, I'll explore a fairly dull use-after-free in the Linux kernel that's been around in the process termination code for quite a number of years. It occurs exactly for this reason. The vulnerability is only dull because there doesn't appear to be any way to usefully exploit it beyond causing a DoS.
https://accessvector.net/2022/linux-itimers-uaf
https://accessvector.net/2022/linux-itimers-uaf
👍1