73 matches found
germy
Resumen germy es un exploit de escalada de privilegios del kernel de Linux NGSM para las versiones 5.15-rc1 a 6.6-rc1. Consulta TECHNICALDETAILS.md para obtener información sobre las vulnerabilidades y las técnicas de explotación utilizadas. Probado en: Ubuntu LTS 20.04.6 5.15.x y 22.04.4 6.5.x...
ExploitGSM
ExploitGSM Exploit para kernels 6.4 - 6.5 y otro exploit para 5.15 - 6.5 Telegram de contacto - https://t.me/YuriiCrimson Telegram chat - https://t.me/itcrowdua En invierno encontré dos vulnerabilidades en el controlador ngsm. Después me escribió Jammes con la propuesta de comprármelas. Como...
CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel-core / kernel-debug / kernel-debug-core / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1753297988)
The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1753297988 advisory. - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race on unaccepted mptcp sockets When the listener...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053196)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053196 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: require CAPNETADMIN to attach NGSM0710 ldisc Any unprivileged user can attach NGSM0710...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002303)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002303 advisory. In the Linux kernel, the following vulnerability has been resolved: Revert tty: ngsm: fix UAF in gsmcleanupmux This reverts commit...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098806)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098806 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix deadlock and link starvation in outgoing data path The current implementation queu...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100162)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100162 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: require CAPNETADMIN to attach NGSM0710 ldisc Any unprivileged user can attach NGSM0710...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005150)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005150 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Fix use-after-free in gsmcleanupmux BUG: KASAN: slab-use-after-free in...
The vulnerability of the n_gsm component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ngsm component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
SUSE CVE-2025-40071
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...
CVE-2025-40071 tty: n_gsm: Don't block input queue by waiting MSC
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...
CVE-2025-40071 tty: n_gsm: Don't block input queue by waiting MSC
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...
CVE-2025-40071: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...
EUVD-2022-55187
Malicious code in bioql PyPI...
SUSE CVE-2022-50116
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix deadlock and link starvation in outgoing data path The current implementation queues up new control and user packets as needed and processes this queue down to the ldisc in the same code path. That means that the...
DEBIAN-CVE-2022-50116
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix deadlock and link starvation in outgoing data path The current implementation queues up new control and user packets as needed and processes this queue down to the ldisc in the same code path. That means that the...
CVE-2022-50116
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix deadlock and link starvation in outgoing data path The current implementation queues up new control and user packets as needed and processes this queue down to the ldisc in the same code path. That means that the...
CVE-2022-49941
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
DEBIAN-CVE-2022-49940
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: add sanity check for gsm-receive in gsmreceivebuf A null pointer dereference can happen when attempting to access the "gsm-receive" function in gsmldreceivebuf. Currently, the code assumes that gsm-recieve is only call...
CVE-2022-50116
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix deadlock and link starvation in outgoing data path The current implementation queues up new control and user packets as needed and processes this queue down to the ldisc in the same code path. That means that the...