Denial Of Service

kernel is vulnerable to denial of service. It was found that the kvmvmioctlassigndevice function in the KVM subsystem of a Linux kernel did not check if the user requesting device assignment was privileged or not. A member of the kvm group on the host could assign unused PCI devices, or even...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the way the KVM subsystem of a Linux kernel handled PIT Programmable Interval Timer IRQs interrupt requests when there was no virtual interrupt controller set up. A malicious user in the kvm group on the host could force this situatio...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists as the I/O statistics from the taskstats subsystem could be read without any restrictions. A local, unprivileged user could use this flaw to gather confidential information, such as the length of a password used in a process...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists through inconsistency in the methods for allocating and freeing NFSv4 ACL data; CVE-2010-4250 fix caused a regression; a flaw in nextpidmap and inetdiagbcaudit; flaws in the CAN implementation; a race condition in the memory...

Denial Of Service (DoS)

xen is vulnerable to denial of service DoS. The vulnerability exists as a buffer overflow flaw was found in the Xen hypervisor SCSI subsystem emulation. An unprivileged, local guest user could provide a large number of bytes that are used to zero out a fixed-sized buffer via a SAI READ CAPACITY...

Privilege Escalation

qemu-kvm is vulnerable to privilege escalation. The vulnerability exists as it was found that the virtio subsystem in qemu-kvm did not properly validate virtqueue in and out requests from the guest. A privileged guest user could use this flaw to trigger a buffer overflow, allowing them to crash t...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the Linux kernel's networking subsystem. If the number of packets received exceeded the receiver's buffer limit, they were queued in a backlog, consuming memory, instead of being discarded. A remote...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A missing integer overflow check in sndctlnew in the Linux kernel's sound subsystem could allow a local, unprivileged user on a 32-bit system to cause a denial of service or escalate their privileges...

Log Injection

util-linux is vulnerable to log injection. The vulnerability exists in util-linux when logging log in attempts via the audit subsystem of the Linux kernel. A remote attacker could use this flaw to modify certain parts of logged events, possibly hiding their activities on a system...

Buffer Overflow

The kernel is vulnerable to buffer overflow. Buffer overflow flaws were found in ISDN subsystem. A local unprivileged user could use these flaws to cause a denial of service...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as two buffer overflow flaws were found in ISDN subsystem. A local unprivileged user could use these flaws to cause a denial of service...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists as a flaw in the Bluetooth subsystem that allowed a local user to trigger an information leak...

Authorization Bypass

openssh is vulnerable to authorization bypass. The vulnerability exists as a flaw was found in the way the ssh server wrote account names to the audit subsystem. An attacker could inject strings containing parts of audit messages, which could possibly mislead or confuse audit log parsing tools...

Stop error 0x9E and failover cluster can't come online in Windows Server 2012

Stop error 0x9E and failover cluster can't come online in Windows Server 2012 Symptoms This issue occurs when the following conditions are true: You have a Network File System NFS file server which is hosted on a two-node Windows Server 2012-based clustered storage server. You have the Data...

CVE-2019-9857

A flaw in the inotify subsystem can allow a local attacker to create a denial of service DOS situation in which the memory use of watches on existing watchpoints were not accounted for correctly...

Null pointer dereference

An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xxpb0100.c mishandle invalid descriptors, as demonstrated by a NULL pointer dereference, aka CID-485b06aadb93...

CVE-2020-11609

An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xxpb0100.c mishandle invalid descriptors, as demonstrated by a NULL pointer dereference, aka CID-485b06aadb93...

CVE-2020-11609

An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xxpb0100.c mishandle invalid descriptors, as demonstrated by a NULL pointer dereference, aka CID-485b06aadb93...

CVE-2017-18551

An out of bounds OOB memory access flaw was found in i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c in I2C subsystem. A read request for length data-block0 greater than 'I2CSMBUSBLOCKMAX + 1' may cause underlying I2C driver write out of array's boundary. This could allow a local attacker wi...

CVE-2018-19406

A NULL pointer dereference security flaw was found in the Linux kernel in kvmpvsendipi in arch/x86/kvm/lapic.c. This allows local users with certain privileges to cause a denial of service via a crafted system call to the KVM subsystem...