2093 matches found
PT-2025-37562
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue was identified and resolved in the Linux kernel's raw get next function. This issue stemmed from parallel execution sequences potentially freeing a socket while...
SUSE CVE-2017-2618
A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...
Oracle Linux 6 : kernel (ELSA-2011-1530)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1530 advisory. - kernel KEYS: Fix a NULL pointer deref in the user-defined key type David Howells 751190 CVE-2011-4110 - netdrv benet: remove bogus 'unlikely' on vlan...
kernel security update
2.6.32-754.35.1.0.10.el6.OL6 - proc: procskipspaces shouldn't think it is working on C strings Linus Torvalds CVE-2022-4378 Orabug: 35304147 - proc: avoid integer type confusion in getproclong Linus Torvalds CVE-2022-4378 Orabug: 35304147...
EulerOS 2.0 SP9 : docker-runc (EulerOS-SA-2023-2581)
According to the versions of the docker-runc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfslinux.go. To exploit...
Information disclosure in Linux kernels through 3.1
In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...
buildah security update
runc 1:1.1.4-1.0.1 - rootless: fix /sys/fs/cgroup mounts to prevent CVE-2023-25809 - rootfs: prohibit symlinks that conflicts with readonlyPaths and/or maskedPaths to prevent CVE-2023-27561 - Prohibit /proc and /sys to be symlinks to prevent CVE-2023-28642 - JIRA: OLDIS-25589...
OESA-2023-1383 runc security update
runc is a CLI tool for spawning and running containers according to the OCI specification. Security Fixes: runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when /proc inside the container is symlinked with a...
Amazon Linux 2023 : runc (ALAS2023-2023-208)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-208 advisory. runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes /sys/fs/cgroup writable in following...
Amazon Linux 2 : runc (ALASDOCKER-2023-025)
The version of runc installed on the remote host is prior to 1.1.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2023-025 advisory. runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was...
kernel: stack overflow in do_proc_dointvec and proc_skip_spaces
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system...
Important: runc
Issue Overview: runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes /sys/fs/cgroup writable in following conditons: 1. when runc is executed inside the user namespace, and the config.json does not...
USN-6088-2 runc vulnerabilities
USN-6088-1 fixed vulnerabilities in runC. This update provides the corresponding updates for Ubuntu 16.04 LTS. It was discovered that runC incorrectly performed access control when mounting /proc to non-directories. An attacker could possibly use this issue to escalate privileges. CVE-2019-19921...
USN-6088-1 runc vulnerabilities
It was discovered that runC incorrectly made /sys/fs/cgroup writable when in rootless mode. An attacker could possibly use this issue to escalate privileges. CVE-2023-25809 It was discovered that runC incorrectly performed access control when mounting /proc to non-directories. An attacker could...
kernel: Soft lockup occurred during __page_mapcount
A race problem was found in fs/proc/taskmmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service...
The vulnerability of the pde_subdir_find() function in the fs/proc/generic.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the pdesubdirfind function in the fs/proc/generic.c module of the Linux kernel relates to the repeated use of previously freed memory, due to the lack of checks on the results of the functions being called. Exploiting this vulnerability could allow an attacker to cause a...
kernel: ipv6: fix WARNING in ip6_route_net_exit_late()
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix WARNING in ip6routenetexitlate During the initialization of ip6routenetinitlate, if file ipv6route or rt6stats fails to be created, the initialization is successful by default. Therefore, the ipv6route or rt6stats file...
PT-2025-26132 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, which occurred when the emulation proc handler function changed table-data for proc dointvec minmax. This could generate an Oops...
PT-2025-18620 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A warning in the ip6 route net exit late function has been fixed. During the initialization of ip6 route net init late, if the ipv6 route or rt6 stats file fails to be created, the...
