ASB-A-233972091

'remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploited...

ASB-A-232441339

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it which makes it available to be freed, and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption...

USN-5541-1: Linux kernel (Azure) vulnerabilities

Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not perform permission checks correctly in some situations. A local attacker could possibly use this to gain administrative privileges. CVE-2021-4197 Jann Horn discovered that the FUSE file system i...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-016)

The version of kernel installed on the remote host is prior to 5.10.126-117.518. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-016 advisory. Due to the small table perturb size, a memory leak flaw was found in the Linux kernel's TCP source port...

AlmaLinux 8 : kernel (5316) (ALSA-2022:5316)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5316 advisory. - A buffer over-read at the framebuffer layer in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory,...

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS version 15.6 and iPadOS version 15.6, which stems from an application tha...

PT-2022-21503 · Apple · Ios +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.6 iPadOS versions prior to 15.6 tvOS versions prior to 15.6 macOS Monterey versions prior to 12.5 Description: The issue allows an app to potentially disclose kernel memory due to inadequate memory handling...

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS prior to 15.6 and iPadOS prior to 15.6, which stems from a boundary condition i...

PT-2022-21493 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8.7 tvOS versions prior to 15.6 iOS versions prior to 15.6 iPadOS versions prior to 15.6 macOS Monterey versions prior to 12.5 Description: An out-of-bounds read issue was addressed with improved bounds checking, whi...

Apple iOS 和 iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS that originates from an application that could cause the syste...

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS, which can be exploited by remote attackers to cause...

Apple iOS 和 iPadOS 信息泄露漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. Apple iOS version 15.6 and iPadOS version 15.6 contain an information disclosure vulnerability that originates from an...

PT-2022-21511 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 tvOS versions prior to 15.6 iOS versions prior to 15.6 iPadOS versions prior to 15.6 Description: The issue allows an app to potentially cause unexpected system termination or write kernel memory due to inadequate...

DEBIAN-CVE-2021-33655

When sending malicous data to kernel by ioctl cmd FBIOPUTVSCREENINFO,kernel will write memory out of bounds...

UBUNTU-CVE-2021-33655

When sending malicous data to kernel by ioctl cmd FBIOPUTVSCREENINFO,kernel will write memory out of bounds...

CVE-2021-33656

When setting font with malicous data by ioctl cmd PIOFONT,kernel will write memory out of bounds...

UBUNTU-CVE-2021-33656

When setting font with malicous data by ioctl cmd PIOFONT,kernel will write memory out of bounds...

The vulnerability of microprogramming software for Intel and AMD processors allows attackers to extract sensitive information from the kernel’s memory or launch attacks on host systems from virtual machines.

The vulnerability of microprogramming software for Intel and AMD processors lies in errors during the processing of the “ret” instruction, which extracts an address to move from the stack. Exploiting this vulnerability can allow attackers to extract protected information from the kernel’s memory ...

The vulnerability of microprogramming software for Intel and AMD processors allows attackers to extract sensitive information from the kernel’s memory or launch attacks on host systems from virtual machines.

The vulnerability of microprogramming software for Intel and AMD processors lies in errors during the processing of the “ret” instruction, which retrieves an address for transitioning from the stack. Exploiting this vulnerability can allow attackers to extract protected information from the...

AZL-10137 CVE-2021-4135 affecting package kernel for versions less than 5.15.67.1-4

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsimmapallocelem being called. A local user could use this flaw to get unauthorized access to some data...