Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak when using the debugfslookup function...

CVE-2022-20597

In ppmpuset of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243480506References: N...

PT-2022-29952

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue concerns a fix in the kmap local sched in,out function. It was introduced in version v5.11 and fixed in version v5.15.34. The actual impact and attack plausibility have not yet been...

PT-2021-27207

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to the cake destroy function being called from cake init. This problem was introduced in version v4.19 and is fixed in Linux Kernel version v5.15.11. The actual impact an...

PT-2021-27140

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description The issue is related to the cake destroy function being called from cake init. This problem was introduced in version v4.19 and is fixed in Linux Kernel version v5.4.168. The actual impact an...

Integer overflow

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow on the size parameter of the tzmapsharedmem function, which might lead to denial of service, information disclosure, or data tampering...

CVE-2021-34381

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow on the size parameter of the tzmapsharedmem function, which might lead to denial of service, information disclosure, or data tampering...

CVE-2021-34381

CVE-2021-34381 affects NVIDIA Trusty TLK: the vulnerability lies in the TLK kernel function where insufficient checks allow an integer overflow in the size parameter of the tz_map_shared_mem function. This could lead to denial of service, information disclosure, or data tampering. Affected produc...

PT-2021-20494

Name of the Vulnerable Software and Affected Versions: Trusty TLK affected versions not specified Description: The issue is related to a lack of checks in the NVIDIA TLK kernel function, allowing the exploitation of an integer overflow on the size parameter of the tz map shared mem function. This...

CVE-2021-34391

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service...

CVE-2021-34390

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service...

CVE-2021-34390

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service...

CVE-2021-34390

CVE-2021-34390 concerns Trusty TLK (NVIDIA TLK kernel) where a lack of checks enables an integer overflow via a user-triggered SMC call, potentially causing denial of service. The connected NVIDIA bulletin (Security Updates) confirms affected Jetson products and recommends updating to newer Debia...

CVE-2021-34390: Integer Overflow or Wraparound

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service...

CVE-2020-24863

A memory corruption vulnerability was found in the kernel function kerngetfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode...

Memory corruption

A memory corruption vulnerability was found in the kernel function kerngetfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode...

CVE-2020-24863

The CVE-2020-24863 vulnerability is a kernel memory corruption in kern_getfsstat affecting MidnightBSD prior to 1.2.7 and 1.3 up to 2020-08-19, and FreeBSD up to 11.4. A crafted size value combined with an invalid mode can trigger an invalid free, leading to a system crash. The connected document...

CVE-2020-8508

nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled...

CVE-2020-8508

nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled...

PT-2020-20185

Name of the Vulnerable Software and Affected Versions Norman Malware Cleaner version 2.08.08 Description The issue arises from the mishandling of function pointers passed between user and kernel mode in the nsak64.sys driver, allowing users to call arbitrary kernel functions. Recommendations For...