vulnerability

Oracle Linux: CVE-2024-50124: ELSA-2024-11486: kernel security update (MODERATE) (Multiple Advisories)

Severity
6
CVSS
(AV:A/AC:L/Au:S/C:N/I:N/A:C)
Published
Nov 5, 2024
Added
Jan 7, 2025
Modified
Jan 14, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: Fix UAF on iso_sock_timeout
conn->sk maybe have been unlinked/freed while waiting for iso_conn_lock
so this checks if the conn->sk is still valid by checking if it part of
iso_sk_list.

Solution

oracle-linux-upgrade-kernel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.