Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A resource management error vulnerability exists in the Linux kernel, which can be exploited by an attacker to trigger a denial of service via the IPC object Memcg Limits Bypass...

PT-2021-6871 · Linux +10 · Linux Kernel +10

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a lack of authentication procedure in the Linux kernel, specifically in the control groups and namespaces subsystem. This allows an unprivileged user to write t...

UBUNTU-CVE-2021-3759

A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from th...

UVI-2021-1001344 cgroup: verify that source is a string

cgroup: verify that source is a string This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.134 by commit...

GSD-2021-1001344 cgroup: verify that source is a string

cgroup: verify that source is a string This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.134 by commit...

UVI-2021-1001284 cgroup: verify that source is a string

cgroup: verify that source is a string This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.52 by commit...

GSD-2021-1001284 cgroup: verify that source is a string

cgroup: verify that source is a string This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.52 by commit...

GSD-2021-1001213 cgroup: verify that source is a string

cgroup: verify that source is a string This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit a41573667b39152176f6b08d10b4deb171e541c...

UVI-2021-1001213 cgroup: verify that source is a string

cgroup: verify that source is a string This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit a41573667b39152176f6b08d10b4deb171e541c...

RLSA-2021:2717 Important: systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...

PT-2021-1524 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the cgroup v1 parser, specifically in the cgroup1 parse param function in kernel/cgroup/cgroup-v1.c. This issue can be exploited by a local attacker...

UVI-2021-1001138 psi: Fix psi state corruption when schedule() races with cgroup move

psi: Fix psi state corruption when schedule races with cgroup move This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13 by commit...

GSD-2021-1001138 psi: Fix psi state corruption when schedule() races with cgroup move

psi: Fix psi state corruption when schedule races with cgroup move This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13 by commit...

The vulnerability of the cgroupv2 subsystem in the Linux operating system allows a hacker to cause a service failure or increase their privileges.

The vulnerability of the cgroupv2 subsystem in the Linux operating system is related to the assignment of a zero pointer. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

kernel: Use After Free vulnerability in cgroup BPF component

A use-after-free flaw was found in the Linux kernel’s cgroupv2 subsystem when rebooting the system. This flaw allows a local user to crash the system or escalate their privileges. The highest threat from this vulnerability is to system availability...

ALSA-2021:1578 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Integer overflow in IntelR Graphics Drivers CVE-2020-12362 kernel: memory leak in sofsetgetlargectrldata function in sound/soc/sof/ipc.c CVE-2019-18811 kernel: use-after-free caused by a...

PT-2024-11114 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the memory control and slab management in the Linux kernel. Specifically, it involves the use of obj cgroup APIs to charge kmem pages. The problem arises when...

AZL-6530 CVE-2021-23133 affecting package kernel for versions less than 5.10.78.1-1

A race condition in Linux kernel SCTP sockets net/sctp/socket.c before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctpdestroysock is called without socknetsk-sctp.addrwqlock then an element is removed from the...

SUSE: Security Advisory (SUSE-SU-2015:0658-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2021-20194

There is a vulnerability in the linux kernel versions higher than 5.2 if kernel compiled with config params CONFIGBPFSYSCALL=y , CONFIGBPF=y , CONFIGCGROUPS=y , CONFIGCGROUPBPF=y , CONFIGHARDENEDUSERCOPY not set, and BPF hook to getsockopt is registered. As result of BPF execution, the local user...