Lucene search
K

257 matches found

RedhatCVE
RedhatCVE
added 2024/02/23 2:2 p.m.44 views

CVE-2023-52447

In the Linux kernel, the following vulnerability has been resolved: bpf: Defer the free of inner map when necessary When updating or deleting an inner map in map array or map htab, the map may still be accessed by non-sleepable program or sleepable program. However bpfmapfdputptr decreases the...

6.7CVSS6.6AI score0.00248EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/10/12 12:0 a.m.9 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-2566)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS8.5AI score0.07604EPSS
Exploits39References4
Positive Technologies
Positive Technologies
added 2022/09/16 12:0 a.m.2 views

PT-2022-33542 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.1 Description: A potential security issue exists due to the improper freeing of not-finalized bpf prog pack in the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

7.4AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/09/16 12:0 a.m.2 views

PT-2025-18481

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, which prevented bpf program recursion for raw tracepoint probes. The issue was caused by a bpf program attached to the contention...

5.5CVSS6.1AI score0.00151EPSS
Exploits0References289
OSV
OSV
added 2022/03/16 3:15 p.m.2 views

DEBIAN-CVE-2021-39711

In bpfprogtestrunskb of testrun.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

4.4CVSS6.4AI score0.00144EPSS
Exploits0References1
OSV
OSV
added 2021/12/19 7:38 p.m.12 views

GSD-2021-1002474 ice: avoid bpf_prog refcount underflow

ice: avoid bpfprog refcount underflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit e65a8707b4cd756d26d246bb2b9fab06eebafac...

7.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/11/20 12:0 a.m.49 views

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2021:3748-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3748-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs...

7.8CVSS7.4AI score0.01488EPSS
Exploits10References63
Tenable Nessus
Tenable Nessus
added 2021/11/17 12:0 a.m.55 views

EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2021-2745)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a...

7.1CVSS6.5AI score0.00726EPSS
Exploits4References5
OpenVAS
OpenVAS
added 2021/11/17 12:0 a.m.32 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2745)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.7AI score0.00726EPSS
Exploits4References2
OSV
OSV
added 2021/11/15 12:24 p.m.10 views

OPENSUSE-SU-2021:1477-1 Security update for the Linux Kernel

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13405: The inodeinitowner function in fs/inode.c allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID t...

7.8CVSS7.3AI score0.01488EPSS
Exploits10References72
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.65 views

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5137-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5137-2 advisory. It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use...

7.8CVSS7.4AI score0.02014EPSS
Exploits6References10
Tenable Nessus
Tenable Nessus
added 2021/11/09 12:0 a.m.50 views

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5137-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5137-1 advisory. It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use...

7.8CVSS7.6AI score0.02014EPSS
Exploits6References11
Tenable Nessus
Tenable Nessus
added 2021/10/14 12:0 a.m.32 views

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:3415-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3415-1 advisory. - An issue was discovered in the Linux kernel through 5.6.11. sgwrite lacks an sgremoverequest call in a certain failure case, aka...

8.8CVSS6.8AI score0.01751EPSS
Exploits9References174
Tenable Nessus
Tenable Nessus
added 2021/09/24 12:0 a.m.43 views

openSUSE 15 Security Update : kernel (openSUSE-SU-2021:3205-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3205-1 advisory. - An issue was discovered in the Linux kernel through 5.6.11. sgwrite lacks an sgremoverequest call in a certain failure case, aka...

8.8CVSS6.8AI score0.03354EPSS
Exploits8References167
Mageia
Mageia
added 2021/08/07 9:31 a.m.59 views

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.56 and fixes at least the following security issues: In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection...

5.5CVSS3.7AI score0.0046EPSS
Exploits2References5
Mageia
Mageia
added 2021/08/07 9:31 a.m.49 views

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.56 and fixes at least the following security issues: In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism...

5.5CVSS1.6AI score0.0046EPSS
Exploits2References7
Tenable Nessus
Tenable Nessus
added 2021/08/06 12:0 a.m.341 views

Amazon Linux 2 : kernel, --advisory ALAS2-2021-1696 (ALAS-2021-1696)

The version of kernel installed on the remote host is prior to 4.14.241-184.433. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1696 advisory. A flaw was found in the Linux kernel, where a BPF program can obtain sensitive information from kernel memory via ...

7.8CVSS6AI score0.00996EPSS
Exploits2References34
Amazon
Amazon
added 2021/08/05 12:0 a.m.58 views

Important: kernel

Issue Overview: A flaw was found in the Linux kernel, where a BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack. This issue occurs when the protection mechanism neglects the possibility of uninitialized memory locations on the BPF...

7.8CVSS6.3AI score0.00996EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2021/08/02 5:14 p.m.55 views

CVE-2021-34556

A flaw was found in the Linux kernel, where a BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack. This issue occurs when the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack. The highes...

5.5CVSS2.6AI score0.00419EPSS
Exploits2References4
OSV
OSV
added 2021/08/02 5:15 a.m.15 views

CVE-2021-34556

In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack...

5.5CVSS6.3AI score
Exploits0References6
Rows per page
Query Builder