GSD-2022-1000735 configfs: fix a race in configfs_{,un}register_subsystem()

configfs: fix a race in configfs,unregistersubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

PT-2022-29185

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.232 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-29129

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-29076

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. This issue was...

PT-2022-29160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29009

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29205

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.269 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-29224

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1308)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege wi...

PT-2022-7490 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a race condition in the configfs component of the Linux kernel. When configfs register subsystem or configfs unregister subsystem is executing link grou...

CVE-2021-39648

In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2021-39656

In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

UBUNTU-CVE-2021-39648

In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

UBUNTU-CVE-2021-39656

In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39648

In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2021-22699

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible use-after-free due to improper locking in the configfs open file function of file.c. This could lead to local escalation of privilege in t...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. A memory misreference vulnerability exists in the Kernel in Google Android. The vulnerability stems from a mis-locked configfsopenfile in file.c that is reused after release. An attacker with system execution privileges cou...

Linux kernel gadget_dev_desc_UDC_store Buffer Overflow DoS

The vulnerability in drivers/usb/gadget/configfs.c BSC 1171982 of the Linux kernel relates to reading beyond the buffer data boundary. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Unbreakable Enterprise kernel-container security update

4.14.35-2025.402.2.1.el7 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040805 CVE-2020-8694 CVE-2020-8695 4.14.35-2025.402.2.el7 - ocfs2: fix remounting needed after setfacl command Gang He - Fix multiple variable definition with syzkaller Hans Westgaard Ry Orabug:...

Unbreakable Enterprise kernel-container security update

4.14.35-2025.402.2.1.el7 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040805 CVE-2020-8694 CVE-2020-8695 4.14.35-2025.402.2.el7 - ocfs2: fix remounting needed after setfacl command Gang He - Fix multiple variable definition with syzkaller Hans Westgaard Ry Orabug:...