Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allow...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Alpine:v3.21 libkcapi

[{"type":"ECOSYSTEM","events":[{"introduced":"0.12.0"},{"fixed":"1.5.1-r0"}]}]

Alpine:v3.22 libkcapi

[{"type":"ECOSYSTEM","events":[{"introduced":"0.12.0"},{"fixed":"1.5.1-r0"}]}]

Alpine:v3.23 libkcapi

[{"type":"ECOSYSTEM","events":[{"introduced":"0.12.0"},{"fixed":"1.5.1-r0"}]}]

Alpine:v3.24 libkcapi

[{"type":"ECOSYSTEM","events":[{"introduced":"0.12.0"},{"fixed":"1.5.1-r0"}]}]

参照URL

advisory security.alpinelinux.org