OESA-2021-1318 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users with CAPSYSADMIN capability cou...

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.

...

Intel Ethernet Adapters 800 代码问题漏洞

Intel Ethernet Adapters 800 is an Ethernet adapter from Intel Corporation USA. A security vulnerability exists in the IntelR Ethernet Adapters 800 Series Controllers, which stems from an incorrect condition check in the firmware of the adapters in question. The vulnerability could allow a...

AZL-6577 CVE-2021-3679 affecting package kernel for versions less than 5.10.78.1-1

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users with CAPSYSADMIN capability could use this flaw to starve the resources causing denial of service...

CVE-2021-3679

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users with CAPSYSADMIN capability could use this flaw to starve the resources causing denial of service...

CVE-2021-3679: Uncontrolled Resource Consumption

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users with CAPSYSADMIN capability could use this flaw to starve the resources causing denial of service...

PT-2021-14605 · Dell · Dell Precision Rack Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to an out-of-bounds array access. A local malicious user with high privileges may exploit...

kernel: Null pointer dereference in some Intel(R) Graphics Drivers

Null pointer reference in some IntelR Graphics Drivers for Microsoft Windows and the Linux kernel may allow a privileged user to potentially enable a denial of service via local access...

kernel: Improper input validation in some Intel(R) Graphics Drivers

A flaw was found in the Linux kernel. Improper input validation in some IntelR Graphics Drivers may allow a privileged user to potentially enable a denial of service via local access...

kernel: DoS by corrupting mountpoint reference counter

A flaw was found in the Linux kernel’s implementation of the pivotroot syscall. This flaw allows a local privileged user root outside or root inside a privileged container to exploit a race condition to manipulate the reference count of the root filesystem. To be able to abuse this flaw, the...

kernel: Improper input validation in some Intel(R) Graphics Drivers

A flaw was found in the Linux kernel. Improper input validation in some IntelR Graphics Drivers may allow a privileged user to potentially enable a denial of service via local access...

CVE-2020-24492

Insufficient access control in the firmware for the IntelR 722 Ethernet Controllers before version 1.5 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2020-12372

Unchecked return value in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2020-12366

Insufficient input validation in some IntelR Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enable an escalation of privilege via local access...

UBUNTU-CVE-2020-12363

Improper input validation in some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access...

VulnCheck KEV: CVE-2023-21492

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization ASLR bypass...

kernel: possible use-after-free due to a race condition in cdev_get of char_dev.c

A use-after-free flaw was found in the way the Linux kernel's filesystem subsystem handled a race condition in the chrdevopen function. This flaw allows a privileged local user to starve the resources, causing a denial of service or potentially escalating their privileges. The highest threat from...

Security Bulletin: A security vulnerability has been fixed in IBM Security Identity Manager (CVE-2020-4538)

Summary IBM Security Identity Manager has addressed the following vulnerability due to allowing a privileged local user to perform unauthorized actions Vulnerability Details CVEID: CVE-2020-4538 DESCRIPTION: IBM Security Identity Manager could allow a privileged local user to perform unauthorized...

kernel: lockdown: bypass through ACPI write via acpi_configfs

A flaw was found in how the ACPI table loading through acpiconfigfs was handled when the kernel was locked down. This flaw allows a root privileged local user to circumvent the kernel lockdown restrictions. The highest threat from this vulnerability is to data confidentiality and integrity as wel...

CVE-2019-11102

Insufficient input validation in IntelR DAL software for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...