PT-2022-28405

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.26 through 4.19.227 Description The issue concerns information leakage in the /proc/net/ptype endpoint. It was introduced in version v2.6.26 and fixed in version v4.19.228. The actual impact and attack plausibility ha...

PT-2022-28536

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.19 Description The issue concerns information leakage in the /proc/net/ptype API endpoint. It was introduced in version v2.6.26 and fixed in version v5.15.19. The actual impact and attack plausibility have...

PT-2022-28380

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.26 through 4.14.264 Description The issue concerns information leakage in the /proc/net/ptype API endpoint. It was introduced in version v2.6.26 and fixed in version v4.14.265. The actual impact and attack plausibilit...

PT-2022-28474

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.26 through 5.10.95 Description The issue concerns an information leakage in the /proc/net/ptype API endpoint. It was introduced in version v2.6.26 and fixed in version v5.10.96. The actual impact and attack plausibili...

PT-2022-28361

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.300 Description The issue concerns an information leakage in the /proc/net/ptype API endpoint. It was introduced in version v2.6.26 and fixed in version v4.9.300. The actual impact and attack plausibility ha...

PT-2022-28434

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.176 Description The issue concerns an information leakage in the /proc/net/ptype API endpoint. It was introduced in version v2.6.26 and fixed in version v5.4.176. The actual impact and attack plausibility ha...

GHSA-V4H8-794J-G8MM Arbitrary File Override in Docker Engine

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules LSM and dockert policies via an image that allows volumes to override files in /proc...

Arbitrary File Override in Docker Engine

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules LSM and dockert policies via an image that allows volumes to override files in /proc...

PT-2024-10516

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc6-syzkaller Description The vulnerability is related to the fs/proc component of the Linux kernel, specifically in the task mmu.c file. It is caused by a race condition that occurs when the MADV FREE...

The vulnerability of the /proc/self/setgroups utility for managing shadow accounts relates to the improper assignment of permissions to files, allowing an attacker to increase their privileges.

The vulnerability of the /proc/self/setgroups utility for managing shadow accounts is related to the improper assignment of permissions to files. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: i40e: Fix queues reservation for XDP CVE-2021-47619 A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw...

Mageia: Security Advisory (MGASA-2014-0025)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for OS Command Injection in Docker

The repository is a proof-of-concept PoC exploit for CVE-2019-5736, a container escape vulnerability in Docker. The PoC is written in Go and is designed to overwrite the /bin/sh binary in a container with a malicious interpreter path, allowing for code execution on the host system. The exploit...

PT-2021-27230

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to the USB core in the Linux Kernel, specifically affecting the do proc control and do proc bulk functions. The actual impact and attack plausibility have not yet been...

Exploit for OS Command Injection in Docker

CVE-2019-5736 is a container escape vulnerability in Docker. The PoC Proof of Concept exploit for this vulnerability is available in the repository sekla/CVE-2019-5736-PoC. The exploit works by overwriting and executing the host system's runc binary from within the container. The exploit has two...

GSD-2021-1002530 proc/vmcore: fix clearing user buffer by properly using clear_user()

proc/vmcore: fix clearing user buffer by properly using clearuser This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

GSD-2021-1002469 proc/vmcore: fix clearing user buffer by properly using clear_user()

proc/vmcore: fix clearing user buffer by properly using clearuser This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...

GSD-2021-1002435 proc/vmcore: fix clearing user buffer by properly using clear_user()

proc/vmcore: fix clearing user buffer by properly using clearuser This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.163 by commit...

GSD-2021-1002409 proc/vmcore: fix clearing user buffer by properly using clear_user()

proc/vmcore: fix clearing user buffer by properly using clearuser This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.219 by commit...

GSD-2021-1002387 proc/vmcore: fix clearing user buffer by properly using clear_user()

proc/vmcore: fix clearing user buffer by properly using clearuser This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.257 by commit...