PT-2022-14426

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In the llcp dlc proc connect pdu function of llcp dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with...

USN-5343-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 releaseagent feature. A local attacker could use this to gain administrative privileges. CVE-2022-0492 It was discovered that the aufs file system in the Linux...

USN-5343-1: Linux kernel vulnerabilities

Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 releaseagent feature. A local attacker could use this to gain administrative privileges. CVE-2022-0492 It was discovered that the aufs file system in the Linux...

Ubuntu: Security Advisory (USN-4977-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: kernel

Issue Overview: A use-after-free flaw was found in the Linux kernel's NFC LLCP protocol implementation in the way the user performs manipulation with an unknown input for the llcpsockbind function. This flaw allows a local user to crash or escalate their privileges on the system. CVE-2020-25670 A...

DEBIAN-CVE-2021-38208

net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...

OESA-2021-1279 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: there was a null pointer dereference in llcpsockgetname in net/nfc/llcpsock.c and reproduced it in linux-5.13.0-rc2. An unprivileged user can trigger this bug and cause denial of service. Root Cause After creating an nfc socket,...

PT-2021-29280

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.12.9 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...

PT-2021-29245

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.10.42 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...

PT-2021-25286

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.3 through 5.12.9 Description: The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel versio...

PT-2021-25251

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.10.42 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...

PT-2021-29207

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.194 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...

PT-2021-25213

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.3 through v4.19.193 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in version v4.19.194...

PT-2021-25225

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.125 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...

PT-2021-29219

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.125 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...

PT-2021-29191

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in version v4.9.272. The...

PT-2021-29199

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.14.235 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel versio...

PT-2021-25205

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.14.235 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel versio...

PT-2021-25189

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.4.271 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...

PT-2021-25197

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...