PT-2022-28725

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue is related to the ax25 component, where an incomplete fix was applied, potentially leading to Use After Free UAF and Null Pointer Dereference NPD bugs. The actual impact and attack...

PT-2022-28810

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to the ax25 component, where an incomplete fix was applied, potentially leading to use-after-free UAF and null pointer dereference NPD bugs. The actual impact and attack...

PT-2022-28601

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.231 Description The issue is related to the ax25 component, where an incomplete fix was applied, potentially leading to Use After Free UAF and Null Pointer Dereference NPD bugs. The actual impact and attack...

PT-2022-28571

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.303 Description The issue is related to the ax25 component, where an incomplete fix was applied, potentially leading to Use After Free UAF and Null Pointer Dereference NPD bugs. The actual impact and attack...

PT-2022-28585

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.268 Description The issue is related to the ax25 component, where an incomplete fix was applied, potentially leading to use-after-free UAF and null pointer dereference NPD bugs. The actual impact and attack...

PT-2022-28624

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.181 Description The issue is related to the ax25 component, where an incomplete fix was applied, potentially leading to use-after-free UAF and null pointer dereference NPD bugs. The actual impact and attack...

PT-2022-28663

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to the ax25 component, where an incomplete fix was applied, potentially leading to use-after-free UAF and null pointer dereference NPD bugs. The actual impact and attack...

USN-5302-1 linux-oem-5.14 vulnerabilities

Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 releaseagent feature. A local attacker could use this to gain administrative privileges. CVE-2022-0492 Brendan Dolan-Gavitt discovered that the Marvell WiFi-Ex...

PT-2021-27282

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.89 Description A potential security issue exists in the hamradio component of the Linux Kernel, related to the defer ax25 kfree after unregister netdev. The actual impact and attack plausibility have not yet...

PT-2021-27245

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.295 Description The issue is related to the hamradio component, specifically the ax25 protocol, where a potential security vulnerability may exist due to a kfree operation being deferred after unregister...

PT-2021-27313

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.12 Description: A potential security issue exists in the hamradio component of the Linux Kernel, related to the defer ax25 kfree after unregister netdev. The actual impact and attack plausibility have not...

PT-2021-27266

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.169 Description The issue is related to the hamradio component, specifically the ax25 protocol, where a potential security vulnerability may exist due to a defer kfree after unregister netdev. The actual...

PT-2021-27250

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.260 Description The issue is related to the hamradio component, specifically the ax25 protocol, where a potential security vulnerability may exist due to a kfree operation being deferred after unregister...

PT-2021-27257

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.223 Description A potential security issue exists in the hamradio component of the Linux Kernel, related to the defer ax25 kfree after unregister netdev. The actual impact and attack plausibility have not y...

PT-2021-27241

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.297 Description A potential security issue exists in the hamradio component of the Linux Kernel, related to the defer ax25 kfree after unregister netdev. The actual impact and attack plausibility have not ye...

The vulnerability of the ax25_create function in the net/ax25/af_ax25.c module of the AF_AX25 kernel of the Linux operating system, related to default access rights settings, allows an attacker to compromise data integrity.

The vulnerability of the ax25create function in the net/ax25/afax25.c module of the AFAX25 kernel of the Linux operating system is related to a lack of mechanisms for standard permissions. Exploiting this vulnerability allows an attacker to compromise data integrity...

Linux kernel memory corruption vulnerability (CNVD-2019-42788)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the ax25create function in the net/ax25/afax25.c file in the AFAX25 network module in Linux kernel 5.3.2 and earlier. An attacker ca...

DEBIAN-CVE-2011-2910

The AX.25 daemon ax25d in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation...

CVE-2011-2910

The AX.25 daemon ax25d in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation...

CVE-2011-2910

The AX.25 daemon ax25d in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation...