UVI-2021-1001040 perf: Fix data race between pin_count increment/decrement

perf: Fix data race between pincount increment/decrement This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

UVI-2021-1000902 perf: Fix data race between pin_count increment/decrement

perf: Fix data race between pincount increment/decrement This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...

PT-2021-29505

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.39 through 5.12.10 Description The issue is related to a data race between pin count increment and decrement. This problem was introduced in version v2.6.39 and is fixed in Linux Kernel version v5.12.11. Recommendatio...

PT-2021-25511

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.39 through 5.12.10 Description: The issue is related to a data race between pin count increment and decrement. This problem was introduced in version v2.6.39 and is fixed in Linux Kernel version v5.12.11...

PT-2021-29427

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.39 through 5.10.43 Description A data race issue exists between pin count increment and decrement operations. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2021-25334

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.39 through 4.14.236 Description: The issue is related to a data race between pin count increment and decrement. This problem was introduced in version v2.6.39 and fixed in version v4.14.237. The actual impact and...

PT-2021-25318

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.273 Description: A data race issue exists between pin count increment and decrement operations. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-29312

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.273 Description The issue is related to a data race between pin count increment and decrement. This problem was introduced in version v2.6.39 and is fixed in Linux Kernel version v4.9.273. The actual impact...

PT-2021-29298

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.273 Description The issue is related to a data race between pin count increment and decrement. This problem was introduced in version v2.6.39 and is fixed in Linux Kernel version v4.4.273. Recommendations Fo...

PT-2021-29328

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.39 through 4.14.236 Description The issue is related to a data race between pin count increment and decrement. This problem was introduced in version v2.6.39 and is fixed in Linux Kernel version v4.14.237...

PT-2021-29367

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.126 Description The issue is related to a data race between pin count increment and decrement. This problem was introduced in version v2.6.39 and is fixed in Linux Kernel version v5.4.126. Recommendations Fo...

PT-2021-29345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.195 Description A data race issue exists between pin count increment and decrement operations. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-25433

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.39 through 5.10.43 Description: A data race issue exists between pin count increment and decrement operations. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kernel...

PT-2021-25373

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.126 Description: A data race issue exists between pin count increment and decrement operations. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-25351

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.195 Description: The issue is related to a data race between pin count increment and decrement. This problem was introduced in version v2.6.39 and is fixed in Linux Kernel version v4.19.195. The actual...

PT-2021-25304

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.273 Description: The issue is related to a data race between pin count increment and decrement. This problem was introduced in version v2.6.39 and is fixed in Linux Kernel version v4.4.273. Recommendations:...

MyEtherWallet: PIN bypass

Summary: MEW apk has improper rate limit. When we try to brute force the PIN, we are rate limited for 5 minutes after 5 or 6 attempt. In my testing I found that it was checking the device's local time so by changing it we can brute force the PIN. Steps To Reproduce: 1.Install MEW app from play...

Unable to launch a VDI (second hop) within a active VDI session (first hop), error “An incorrect pin was presented to the security device”

The customer has FAS in place and it is working fine They are testing the VDI sessions and users can launch Desktops when using their workstations endpoints If they try to launch a second Desktop session second hop within the current VDI session using CWA, they get an error “An incorrect pin was...

Design/Logic Flaw

In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Deploying EFBs securely

It may come as a surprise to some to discover that electronic flight bag security at airlines is often quite variable. Whilst some use an MDM, a lot don’t. Of those who do, PINs are often weak. Some airlines actively encourage pilots to use their devices for personal use. We’ve heard stories of a...