Lucene search

K
redosRedosROS-20240919-02
HistorySep 19, 2024 - 12:00 a.m.

ROS-20240919-02

2024-09-1900:00:00
redos.red-soft.ru
linux kernel
vulnerability
confidentiality
integrity
availability
denial of service
memory release
synchronization errors
null pointer dereferencing
incorrect locking error
memory usage
input validation
buffer boundaries
improper locking
transaction commit
flushoncommit.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

Vulnerability of the reweight_entity () function of the sched component of the Linux operating system kernel is related to
synchronization errors when using a shared resource. Exploitation of the vulnerability could allow
an attacker to impact confidentiality, integrity, and availability.

A vulnerability in the lcd2s component of the Linux operating system kernel is related to a memory release error.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the xen component of the Linux operating system kernel is related to NULL pointer dereferencing.
Exploitation of the vulnerability may allow an attacker to cause a denial of service

A vulnerability in the smc component of the Linux kernel is related to a memory release error.
Exploitation of the vulnerability may allow an attacker to cause a denial of service

A vulnerability in the btrfs component of the Linux kernel is related to an incorrect locking error.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

Vulnerability in the act_mpls component of the Linux kernel is related to incorrect input validation.
data. Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the nfc component of the Linux operating system kernel is related to the possibility of memory usage
after it has been freed. Exploitation of the vulnerability could allow an attacker to impact the
confidentiality, integrity and availability

A vulnerability in the btrfs component of the Linux operating system kernel is related to copying an excessively large
compressed segment, the compressed length could be corrupted and become much larger than the memory allocated for the buffer.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the riscv component of the Linux operating system kernel is related to NULL pointer dereferencing.
Exploitation of the vulnerability may allow an attacker to cause a denial of service

Vulnerability of xhci_free_dev() and xhci_kill_endpoint_urbs() functions of xhci component of Linux operating system kernel is related to dereferencing of NULL pointer.
Linux kernel components of the xhci kernel is related to NULL pointer dereferencing. Exploitation of the vulnerability could allow
an attacker to cause a denial of service

Vulnerability in btrfs component of Linux kernel is related to transaction commit when using flushoncommit.
flushoncommit. Exploitation of the vulnerability could allow an attacker to cause a denial of service.
denial of service

A vulnerability in the io_uring component of the Linux operating system kernel is related to improper locking.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the xhci component of the Linux kernel is related to NULL pointer dereferencing.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the lcd2s component of the Linux kernel is related to an operation exceeding buffer boundaries
in memory. Exploitation of the vulnerability could allow an attacker to impact confidentiality,
integrity and availability of protected information

Vulnerability in the iommu component of the Linux operating system kernel is related to improper locking.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the ipv6 component of the Linux operating system kernel is related to a memory freeing error.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the axi_chan_handle_err () function of the Linux kernel is related to NULL dereferencing of a pointer.
pointer. Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the iommu component of the Linux kernel is related to a memory release error.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the btrfs component of the Linux kernel is related to incorrect handling of memory allocation errors.
memory allocation errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the spi component of the Linux kernel is related to NULL pointer dereferencing.
Exploitation of the vulnerability may allow an attacker to cause a denial of service

Vulnerability of the iommu component of the Linux kernel is related to operation out of buffer boundaries
in memory. Exploitation of the vulnerability may allow an attacker to cause a denial of service

A vulnerability in the btrfs component of the Linux operating system kernel is related to a race condition between a repeated
quota scan and shutdown, leading to a NULL pointer dereference. Exploitation of the vulnerability
could allow an attacker to cause a denial of service

A vulnerability in the nilfs2 components of the Linux operating system kernel is related to NULL pointer dereferencing.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

Vulnerability in af9035 component of Linux kernel is related to NULL pointer dereferencing.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the ibmvnic component of the Linux kernel is related to a memory release error.
Exploitation of the vulnerability may allow an attacker to cause a denial of service

Vulnerability in the sched_fork() function of the sched component of the sched kernel of a Linux operating system is related toVulnerability in the sched_fork() function of the sched component of the sched kernel of the
vulnerability of the sched_fork() function of the sched component of the sched kernel of the Linux operating system is related to synchronization errors when using a shared resource.
using a shared resource. Exploitation of the vulnerability could allow an attacker to impact the
confidentiality, integrity, and availability.

A vulnerability in the AsoC component of the Linux operating system kernel is related to resource management errors.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the nfsd component of the Linux kernel is related to NULL pointer dereferencing.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

Vulnerability in the com20020 component of the Linux kernel is related to NULL pointer dereferencing.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

Vulnerability of btrfs_maybe_wake_unfinished_drop() and btrfs_add_dead_root() functions of btrfs kernel component of the
of the Linux operating system are associated with improper locking. Exploitation of the vulnerability could allow
an attacker to cause a denial of service

A vulnerability in the netfilter component of the netfilter component of the Linux operating system kernel is related to the ability to use
memory after it has been freed. Exploitation of the vulnerability could allow an attacker to impact the
confidentiality, integrity, and availability

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64kernel-lt< 6.1.94-1UNKNOWN

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High