175 matches found
PT-2021-4204 · Linux +9 · Linux Kernel +9
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem due to a race condition when user calls connect to the socket and disconnect simultaneously. This flaw allows ...
Dell EMC iDRAC9 and EMC iDRAC8 Spoofing Vulnerability
Dell EMC iDRAC9 is the United States Dell DELL company's set of hardware and software system management solutions. The solution provides remote management, crash system recovery and power control for Dell PowerEdge systems.Dell EMC iDRAC8 versions prior to 2.80.80.80 and Dell EMC iDRAC9 versions...
[ASA-202107-48] linux: privilege escalation
Arch Linux Security Advisory ASA-202107-48 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-3609 CVE-2021-3612 CVE-2021-33909 Package : linux Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-2181 Summary ======= The...
Red Hat, Inc. Nitro Enclaves内核驱动 资源管理错误漏洞
Nitro Enclaves is a new Amazon Elastic Compute Cloud feature from Amazon that allows the creation of standalone compute environments. Red Hat, Inc. has a security vulnerability in the Nitro Enclaves kernel driver that stems from a null pointer dereference flaw found in the Nitro Enclaves kernel...
kernel: child process is able to access parent mm through hfi dev file handle
A flaw use after free in the Linux kernel infiniband hfi1 driver was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system...
kernel: child process is able to access parent mm through hfi dev file handle
A flaw use after free in the Linux kernel infiniband hfi1 driver was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system...
Canonical Ubuntu 安全漏洞
Canonical Ubuntu is a set of GNU/Linux operating systems from the British company Canonical that focuses on desktop applications. Ubuntu has security vulnerabilities that can be exploited by a local attacker to cause Please to crash, resulting in a denial of service, or possibly escalation of...
kernel: Use after free via PI futex state
A flaw was found in the Linux kernel. A use-after-free memory flaw in the Fast Userspace Mutexes functionality allowing a local user to crash the system or escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as syste...
CVE-2021-20194
A flaw buffer overflow in the Linux kernel BPF subsystem was found in the way user running BPF script calling getsockopt. A local user could use this flaw to crash the system or possibly escalate their privileges on the system. Mitigation The default Red Hat Enterprise Linux kernel prevents...
Linux kernel 资源管理错误漏洞
Linux Kernel is an open source operating system. A security vulnerability exists in Linux kernel iograbfiles, which can be exploited by a local attacker to submit a special request that can crash the system...
DEBIAN-CVE-2020-27835
A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system...
CVE-2020-35499
A NULL pointer dereference flaw may be seen if scosockgetsockopt function in net/bluetooth/sco.c do not have a sanity check for a socket connection, when using BTSNDMTU/BTRCVMTU for SCO sockets. This could allow a local attacker with a special user privilege to crash the system DOS or leak kernel...
kernel: use-after-free in debugfs_remove in fs/debugfs/inode.c
A use-after-free flaw was found in the debugfsremove function in the Linux kernel. The flaw could allow a local attacker with special user or root privilege to crash the system at the time of file or directory removal. This vulnerability can lead to a kernel information leak. The highest threat...
kernel: out-of-bounds write in ext4_xattr_set_entry in fs/ext4/xattr.c
An out-of-bounds write flaw was found in the Linux kernel’s Ext4 FileSystem in the way it uses a crafted ext4 image. This flaw allows a local user with physical access to crash the system or potentially escalate their privileges on the system...
kernel: memory leak in the crypto_report() function in crypto/crypto_user_base.c allows for DoS
A flaw was found in the Linux kernel. The cryptoreport function mishandles resource cleanup on error. A local attacker able to induce the error conditions could use this flaw to crash the system. The highest threat from this vulnerability is to system availability...
kernel: net: bluetooth: type confusion while processing AMP packets
A flaw was found in the way the Linux kernel’s Bluetooth implementation handled L2CAP Logical Link Control and Adaptation Protocol packets with A2MP Alternate MAC-PHY Manager Protocol CID Channel Identifier. This flaw allows a remote attacker in an adjacent range to crash the system, causing a...
UBUNTU-CVE-2020-10720
A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system...
CVE-2020-14356
A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user could use this flaw to crash the system or escalate their privileges on the system...
kernel: Null pointer dereference in the sound/usb/line6/driver.c
A NULL pointer dereference flaw was found in the way the Line 6 POD USB driver in the Linux kernel handled disconnection. This flaw allows an attacker with physical access to the system to crash the system...
kernel: use-after-free in sound/core/init.c and sound/core/info.c
A vulnerability was found in the Linux kernel’s core sound driver code. A use-after-free in a race condition between disconnection events could allow a local attacker who can trigger disconnection events remove or add hardware to crash the system, corrupt memory, or escalate privileges...