CVE-2021-33118

The CVE-2021-33118 issue affects the Intel Serial IO driver for Intel NUC 11 Gen, prior to version 30.100.2104.1. The root cause is improper access control in the installer, potentially enabling privilege escalation for an authenticated local user. Public documentation from Intel’s advisory Intel...

CVE-2021-33118

Improper access control in the software installer for the IntelR Serial IO driver for IntelR NUC 11 Gen before version 30.100.2104.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-20052

Name of the Vulnerable Software and Affected Versions IntelR Serial IO driver for IntelR NUC 11 Gen versions prior to 30.100.2104.1 Description The issue is related to improper access control in the software installer, which may allow an authenticated user to potentially enable escalation of...

CVE-2021-33118: Undefined Security Weakness

Improper access control in the software installer for the IntelR Serial IO driver for IntelR NUC 11 Gen before version 30.100.2104.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33093: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Serial IO driver pack before version 30.100.2104.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-20046

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Serial IO driver pack versions prior to 30.100.2104.1 Description The issue is related to insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Serial IO driver pack. This may allow an...

Design/Logic Flaw

Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity...

CVE-2021-43495

AlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is affected by a directory traversal vulnerability in alquist/IO/input.py. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access...

CVE-2021-43495: Improper Limitation of a Pathname to a Restricted Directory

AlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is affected by a directory traversal vulnerability in alquist/IO/input.py. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access...

PT-2021-23855

Name of the Vulnerable Software and Affected Versions AlquistManager affected versions not specified Description The issue is related to a directory traversal vulnerability in the alquist/IO/input.py file. This vulnerability can lead to the disclosure of critical secrets stored anywhere on the...

UVI-2021-1002147 dm: fix mempool NULL pointer race when completing IO

dm: fix mempool NULL pointer race when completing IO This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002078 dm: fix mempool NULL pointer race when completing IO

dm: fix mempool NULL pointer race when completing IO This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...

PT-2021-30612

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description A potential issue exists in the Linux Kernel, related to a mempool NULL pointer race when completing IO. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-26617

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description A potential issue exists in the Linux Kernel related to a mempool NULL pointer race when completing IO. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-23017 · Kvm +6 · Kvm +6

Name of the Vulnerable Software and Affected Versions: KVM affected versions not specified Description: A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host...

TYPO3 安全漏洞

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. TYPO3 has a licensing issue vulnerability that stems from a breach of access control in the extension-bound media browser, which could be exploited by an attacker to execute a request to th...

Intel NUC 访问控制错误漏洞

The Intel NUC is a small mini computer from Intel USA. An Access Control Error vulnerability exists in the Intel NUC M15 Laptop Kit Serial IO driver pack, which stems from a default privilege management error in the product's installer. An attacker could use this vulnerability to cause a denial o...

kernel: memory leak upon a kmalloc failure in kvm_io_bus_unregister_dev function in virt/kvm/kvm_main.c

A flaw was found in the KVM hypervisor of the Linux kernel. A memory leak could occur in kvmiobusunregisterdev upon a kmalloc failure. The highest threat from this vulnerability is to system availability...

kernel: use-after-free in function hci_sock_bound_ioctl()

A flaw use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hciunregisterdev together with one of the calls hcisockblacklistadd, hcisockblacklistdel, hcigetconninfo,...

kernel: locking inconsistency in drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c can lead to a read-after-free

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel. A local user could use this flaw to read numerical value from memory after free...