CVE-2021-36966 Windows Subsystem for Linux Elevation of Privilege Vulnerability

...

CVE-2021-36966

Technical details about CVE-2021-36966 (affected components, root cause, impact, or remediation) are not provided in the connected documents. Monitor Microsoft/MSRC advisories and NVD/NVD-linked references for concrete remediation information.

CVE-2021-38636: Undefined Security Weakness

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability...

CVE-2021-38635: Undefined Security Weakness

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability...

CVE-2021-36966: Improper Privilege Management

Windows Subsystem for Linux Elevation of Privilege Vulnerability...

Medium: kernel

Issue Overview: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "intctl" field, this issue could...

CVE-2021-36969: Undefined Security Weakness

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability...

Windows Subsystem for Linux Elevation of Privilege Vulnerability

...

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

...

PT-2021-6334 · Microsoft · Windows Redirected Drive Buffering Subsystem +1

Name of the Vulnerable Software and Affected Versions: Windows Redirected Drive Buffering SubSystem RDBSS affected versions not specified Description: The issue is related to information disclosure in the Windows Redirected Drive Buffering SubSystem RDBSS of the Microsoft Windows operating system...

PT-2021-6282 · Microsoft · Windows Redirected Drive Buffering Subsystem +1

Name of the Vulnerable Software and Affected Versions: Windows Redirected Drive Buffering SubSystem RDBSS affected versions not specified Description: The issue is related to information disclosure in the Windows Redirected Drive Buffering SubSystem RDBSS of the Microsoft Windows operating system...

PT-2021-6318 · Microsoft · Windows Subsystem For Linux +1

Name of the Vulnerable Software and Affected Versions: Windows Subsystem for Linux affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Subsystem for Linux, which can be exploited to elevate privileges. This could allow an attacker t...

PT-2021-6297 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to information disclosure in the Windows Redirected Drive Buffering SubSystem Driver. It allows attackers to obtain sensitive information and potentially affect the...

PT-2021-4204 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem due to a race condition when user calls connect to the socket and disconnect simultaneously. This flaw allows ...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A competitive conditions issue vulnerability exists in the Bluetooth subsystem of the Linux kernel, which arises from mismanagement of system resources e.g., memory, disk space...

Microsoft Windows Subsystem for Linux 产品权限许可和访问控制问题漏洞

Microsoft Windows Subsystem for Linux WSL is a Microsoft Windows Subsystem for Linux, a compatibility layer capable of running native Linux binary executables ELF format. A vulnerability exists in the Microsoft Windows Subsystem for Linux with privilege permission and access control issues. Windo...

LSN-0081-1: Kernel Live Patch Security Notice

Maxim Levitsky discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not properly prevent a guest VM from enabling AVIC in nested guest VMs. An attacker in a guest VM could use this to write to portions of the host's physical memory.CVE-2021-3653 Maxim...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9442)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9442 advisory. - l2tp: fix race between l2tpsessiondelete and l2tptunnelcloseall Guillaume Nault Orabug: 33113975 CVE-2020-0429 - l2tp: ensure sessions are freed...

Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5073-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5073-1 advisory. Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM ...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-5070-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5070-1 advisory. Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM to disable...