Linux cipso_v4_genopt Heap Buffer Overflow RCE

The vulnerability of the cipsov4genopt function net/ipv4/cipsoipv4.c in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2021-25893

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-29918

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-29672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-25923

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-29812

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-25677

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.3 Description: The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-25755

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-29855

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-29750

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-25860

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-25817

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-29888

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

kernel: use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c

A flaw use-after-free in the Linux kernel CIPSO network packet labeling protocol functionality was found in the way user open local network connection with the usage of the security labeling that is IP option number 134. A local user could use this flaw to crash the system or possibly escalate...

kernel: use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c

A flaw use-after-free in the Linux kernel CIPSO network packet labeling protocol functionality was found in the way user open local network connection with the usage of the security labeling that is IP option number 134. A local user could use this flaw to crash the system or possibly escalate...

PT-2024-11257 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak has been identified in the Linux kernel, specifically in the netlbl cipsov4 add std function. The memory leak occurs because the memory allocated for doi def-map.std is n...

Privilege Escalation

kernel is vulnerable to privilege escalation. A use-after-free in cipsov4genopt in net/ipv4/cipsoipv4.c due to the CIPSO and CALIPSO refcounting for the DOI definitions are mishandled, leading to writing of an arbitrary value...

USN-4979-1: Linux kernel vulnerabilities

Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service system crash. CVE-2020-25670 Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel did n...

The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.

...

CVE-2021-33033

A flaw use-after-free in the Linux kernel CIPSO network packet labeling protocol functionality was found in the way user open local network connection with the usage of the security labeling that is IP option number 134. A local user could use this flaw to crash the system or possibly escalate...