218 matches found
PT-2021-28868
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.30 through 5.10.36 Description The issue is related to a use-after-free error in the llcp sock bind/connect functionality. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-28905
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.112 through 5.4.118 Description A use-after-free issue exists in the net/nfc component, specifically affecting llcp sock bind and connect functions. The actual impact and attack plausibility have not yet been proven...
PT-2021-28774
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.3 Description The issue is related to a use-after-free error in the llcp sock bind/connect function. This problem was introduced in version v5.12 and is fixed in version v5.12.4. The actual impact and...
PT-2021-24874
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10.30 through v5.10.37 Description: The issue is related to a use-after-free error in the llcp sock bind/connect functionality. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
PT-2021-24911
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.4.112 through 5.4.118 Description: A use-after-free issue was discovered in the net/nfc component, specifically affecting llcp sock bind and connect functions. The actual impact and attack plausibility have not yet bee...
PT-2021-24933
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.19.187 through 4.19.190 Description: The issue is related to a use-after-free error in the llcp sock bind/connect functionality. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
PT-2021-24949
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.14.231 through 4.14.232 Description: The issue is related to a use-after-free error in the llcp sock bind/connect functionality. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
PT-2021-24957
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.9.267 through 4.9.268 Description: The issue is related to a use-after-free error in the llcp sock bind/connect function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
PT-2021-24961
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.4.267 through 4.4.268 Description: The issue is related to a use-after-free error in the llcp sock bind/connect function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
PT-2021-24780
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.3 Description The issue is related to a use-after-free error in the llcp sock bind/connect functionality. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-28955
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.4.267 through 4.4.268 Description The issue is related to a use-after-free error in the llcp sock bind/connect function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
DEBIAN-CVE-2020-25671
A vulnerability was found in Linux Kernel, where a refcount leak in llcpsockconnect causing use-after-free which might lead to privilege escalations...
DEBIAN-CVE-2020-25673
A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...
AZL-34855 CVE-2020-25672 affecting package kernel for versions less than 6.6.35.1-4
A memory leak vulnerability was found in Linux kernel in llcpsockconnect...
Linux kernel llcp_sock_bind/connect use-after-free
...
USN-4948-1 linux-oem-5.10 vulnerabilities
Ryota Shiga discovered that the eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3489...
USN-4948-1: Linux kernel (OEM) vulnerabilities
Ryota Shiga discovered that the eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3489...
The vulnerability of the llcp_sock_create function in the net/nfc/llcp_sock.c module of the AF_NFC module in the Linux operating system, related to default access rights settings, allows a attacker to compromise data integrity.
The vulnerability of the llcpsockcreate function in the net/nfc/llcpsock.c module of the AFNFC module in the Linux operating system is related to a lack of mechanisms for standard permissions. Exploiting this vulnerability could allow an attacker to compromise data integrity...
CVE-2020-25671
A use-after-free flaw was found in the Linux kernel’s NFC LLCP protocol implementation in the way the user triggers the llcpsockconnect function. This flaw allows a local user to crash the system...