Linux Distros Unpatched Vulnerability : CVE-2025-21796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess...

AZL-58917 CVE-2025-21796 affecting package kernel for versions less than 6.6.82.1-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess will still retain a pointer pointing to the released posixacl, which...

CVE-2025-21796

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess will still retain a pointer pointing to the released posixacl, which...

CVE-2025-21796 nfsd: clear acl_access/acl_default after releasing them

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess will still retain a pointer pointing to the released posixacl, which...

CVE-2025-21796

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess will still retain a pointer pointing to the released posixacl, which...

CVE-2025-21796

CVE-2025-21796 is a Linux kernel use-after-free vulnerability in nfsd where acl_access/acl_default could retain a pointer to a released posix_acl, enabling a UAF scenario. The fix is to clear acl_access/acl_default after releasing them to prevent the use-after-free. Public advisories (e.g., ALAS2...

CVE-2025-21796 nfsd: clear acl_access/acl_default after releasing them

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess will still retain a pointer pointing to the released posixacl, which...

CVE-2025-21796 nfsd: clear acl_access/acl_default after releasing them

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess will still retain a pointer pointing to the released posixacl, which...

CVE-2024-21796

creationtimestamp| type| source ---|---|--- 2024-01-24 03:26:26+00:00| seen| https://t.me/ctinow/172490 2024-02-17 17:16:14+00:00| seen| https://t.me/ctinow/186977...

CVE-2024-21796

The CVE-2024-21796 issue affects the Electronic Deliverables Creation Support Tool (Construction Edition prior to v1.0.4) and Electronic Deliverables Creation Support Tool (Design & Survey Edition prior to v1.0.4). The root cause is improper restriction of XML external entity references (XXE), al...

CVE-2024-21796

Electronic Deliverables Creation Support Tool Construction Edition prior to Ver1.0.4 and Electronic Deliverables Creation Support Tool Design & Survey Edition prior to Ver1.0.4 improperly restrict XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on t...

CVE-2024-21796

Electronic Deliverables Creation Support Tool Construction Edition prior to Ver1.0.4 and Electronic Deliverables Creation Support Tool Design & Survey Edition prior to Ver1.0.4 improperly restrict XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on t...

CVE-2023-21796

creationtimestamp| type| source ---|---|--- 2023-01-24 02:25:13+00:00| seen| https://t.me/cibsecurity/56878...

CVE-2023-21796

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2023-21796

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2023-21796

Technical details for CVE-2023-21796 are not provided in the connected documents. Public details appear not to be available in the supplied material. Monitor for updates.

CVE-2023-21796 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

KLA20163 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in File System API can be exploited to caus...

CVE-2022-21796

creationtimestamp| type| source ---|---|--- 2022-01-28 22:22:22+00:00| seen| https://t.me/cibsecurity/36495 2023-08-13 09:47:45+00:00| seen| https://t.me/kasraonecom/458...

CVE-2022-21796

A memory corruption vulnerability exists in the netserver parsecommandlist functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to an out-of-bounds write. An attacker can send an HTTP request to trigger this vulnerability...