PT-2021-30093

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 5.10.72 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v5.10.73. The actual impact and attack plausibility...

PT-2021-26021

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.211 Description A potential security issue exists due to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2021-26051

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.153 Description A potential security issue exists due to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-25963

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 4.4.288 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-30016

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.211 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v4.19.211. The actual impact and attack plausibility have...

PT-2021-25994

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.251 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2021-30046

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.153 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v5.4.153. The actual impact and attack plausibility have n...

PT-2021-30158

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description A potential security issue exists due to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-29958

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 4.4.288 Description A potential issue exists in the net sched component, specifically a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven...

PT-2021-29970

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.287 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2024-11414

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc3-syzkaller Description A NULL pointer dereference vulnerability was found in the Linux kernel's net sched component, specifically in the fifo set limit function. This issue can be triggered by replacing...

CVE-2021-32551

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package apport hooks, it could expose private data to other local users...

CVE-2021-32550

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users...

CVE-2021-32547

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package apport hooks, it could expose private data to other local users...

CVE-2021-32547

The CVE-2021-32547 entry concerns Ubuntu Apport: read_file() in apport/hookutils.py can follow symbolic links or open FIFOs when used by the openjdk-lts package apport hooks, allowing a local attacker to access private data. Documents confirm the vulnerability affects Ubuntu’s Apport hooks and th...

CVE-2021-32550: Improper Link Resolution Before File Access

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users...

CVE-2021-32547: Improper Link Resolution Before File Access

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package apport hooks, it could expose private data to other local users...

CVE-2021-25684

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...

Design/Logic Flaw

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...

CVE-2021-25684

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...