GSD-2021-1002539 arm64: uaccess: avoid blocking within critical sections

arm64: uaccess: avoid blocking within critical sections This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

GSD-2021-1002538 mlxsw: spectrum: Protect driver from buggy firmware

mlxsw: spectrum: Protect driver from buggy firmware This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

GSD-2021-1002519 iio: mma8452: Fix trigger reference couting

iio: mma8452: Fix trigger reference couting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002510 net/sched: fq_pie: prevent dismantle issue

net/sched: fqpie: prevent dismantle issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002508 seg6: fix the iif in the IPv6 socket control block

seg6: fix the iif in the IPv6 socket control block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002505 HID: bigbenff: prevent null pointer dereference

HID: bigbenff: prevent null pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002504 can: pch_can: pch_can_rx_normal: fix use after free

can: pchcan: pchcanrxnormal: fix use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002473 ice: fix vsi->txq_map sizing

ice: fix vsi-txqmap sizing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit 1eb5395add786613c7c5579d3947aa0b8f0ec241, it was...

GSD-2021-1002470 ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE

ARM: socfpga: Fix crash with CONFIGFORTIRYSOURCE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...

GSD-2021-1002460 ALSA: pcm: oss: Limit the period size to 16MB

ALSA: pcm: oss: Limit the period size to 16MB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.165 by commit...

GSD-2021-1002458 HID: bigbenff: prevent null pointer dereference

HID: bigbenff: prevent null pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.165 by commit...

GSD-2021-1002453 can: pch_can: pch_can_rx_normal: fix use after free

can: pchcan: pchcanrxnormal: fix use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.165 by commit...

GSD-2021-1002452 serial: core: fix transmit-buffer reset and memleak

serial: core: fix transmit-buffer reset and memleak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.164 by commit...

GSD-2021-1002420 rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()

rxrpc: Fix rxrpclocal leak in rxrpclookuppeer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.220 by commit...

GSD-2021-1002399 can: pch_can: pch_can_rx_normal: fix use after free

can: pchcan: pchcanrxnormal: fix use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.258 by commit...

GSD-2021-1002393 net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()

net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3infoblock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.257 by...

GSD-2021-1002363 can: pch_can: pch_can_rx_normal: fix use after free

can: pchcan: pchcanrxnormal: fix use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.295 by commit...

Exploit for Deserialization of Untrusted Data in Apache Log4J

This is a proof-of-concept PoC exploit for CVE-2021-44228, a v...

The vulnerability of the FSLogix automated control software lies in the lack of protection for service data, allowing a malicious individual to gain unauthorized access to the device.

The vulnerability of the FSLogix automated desktop virtualization control software lies in the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the device...

Vulnerability Intelligence based on media hype. It works? Grafana LFI and Log4j “Log4Shell” RCE

Hello everyone! In this episode, I want to talk about vulnerabilities, news and hype. The easiest way to get timely information on the most important vulnerabilities is to just read the news regularly, right? Well, I will try to reflect on this using two examples from last week. I have a security...