PT-2021-26093

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-26019

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.211 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

CVE-2021-38383

OwnTone aka owntone-server through 28.1 has a use-after-free in netbind in misc.c...

PT-2021-29671

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.13.4 Description The issue concerns two use after free errors in the ibmasm init one function within the misc/libmasm/module. The actual impact and potential for attack have not been confirmed. Recommendations...

UVI-2021-1001022 usb: misc: brcmstb-usb-pinmap: check return value after calling platform_get_resource()

usb: misc: brcmstb-usb-pinmap: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by...

GSD-2021-1001022 usb: misc: brcmstb-usb-pinmap: check return value after calling platform_get_resource()

usb: misc: brcmstb-usb-pinmap: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by...

Trend Micro Security Agent Privilege Escalation

The vulnerability of the Security Agent component in Trend Micro’s antivirus software products, namely Worry-Free Business Security, Apex One, and OfficeScan, is related to deficiencies in access control for the “Misc” folder. Exploiting this vulnerability can allow attackers to increase their...

Security update for vlc (moderate)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2021:0714-1 Rating: moderate References: 1181918 Cross-References: CVE-2020-26664 CVSS scores: CVE-2020-26664 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP2 An...

CVE-2021-29937

An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone call panics within misc::vecwithsize...

CVE-2021-29937

An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone call panics within misc::vecwithsize...

CVE-2021-29937: Use of Uninitialized Resource

An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone call panics within misc::vecwithsize...

Fedora 32 : kernel / kernel-headers / kernel-tools (2021-14f6642aa6)

The remote Fedora 32 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-14f6642aa6 advisory. - An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications fro...

AZL-6535 CVE-2021-28375 affecting package kernel for versions less than 5.10.78.1-1

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

Sql injection

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

CVE-2021-28375

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

CVE-2021-28375: Missing Authorization

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

RUSTSEC-2021-0046 misc::vec_with_size() can drop uninitialized memory if clone panics

misc::vecwithsize creates a vector of the provided size and immediately calls vec.setlensize on it, initially filling it with uninitialized memory. It then inserts elements using veci = value.clone. If the value.clone call panics, uninitialized items in the vector will be dropped leading to...

PT-2021-18550

Name of the Vulnerable Software and Affected Versions telemetry crate versions through 0.1.2 telemetry crate versions through 2021-02-17 Description An issue was discovered in the telemetry crate where there is a drop of uninitialized memory if a value.clone call panics within misc::vec with size...

PT-2020-22869

Уязвимость загружаемого модуля drivers/usb/misc/iowarrior.ko ядра операционной системы Linux связана с утечкой памяти в реализации обработчика omap4 keypad probe. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании, путем подключения устройства OMAP4 Keypad, которое не...

UBUNTU-CVE-2020-25602

An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...