AlmaLinux 8 : kernel (ALSA-2021:0558)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:0558 advisory. - A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor...

LSN-0082-1 Kernel Live Patch Security Notice

Jann Horn discovered that the tty subsystem of the Linux kernel did not use consistent locking in some situations, leading to a read-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly expose sensitive information kernel...

USN-5130-1 linux vulnerabilities

Jann Horn discovered a race condition in the tty subsystem of the Linux kernel in the locking for the TIOCSPGRP ioctl, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-29661 Jann Horn...

USN-5130-1: Linux kernel vulnerabilities

Jann Horn discovered a race condition in the tty subsystem of the Linux kernel in the locking for the TIOCSPGRP ioctl, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-29661 Jann Horn...

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2021-0104)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID...

PT-2021-30070

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue concerns an out-of-bound vmalloc access in the imageblit function of the tty subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-29968

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.286 Description The issue concerns an out-of-bound vmalloc access in the imageblit function of the tty subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-30032

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue concerns an out-of-bound vmalloc access in the imageblit function of the tty subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-30126

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue concerns an out-of-bound vmalloc access in the imageblit function of the tty subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-25988

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description The issue concerns an out-of-bound vmalloc access in the imageblit function of the tty subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26037

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue concerns an out-of-bound vmalloc access in the imageblit function of the tty subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-30004

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description The issue concerns an out-of-bound vmalloc access in the imageblit function of the tty subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-26075

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue concerns an out-of-bound vmalloc access in the imageblit function of the tty subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-25973

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.286 Description The issue concerns an out-of-bound vmalloc access in the imageblit function of the tty subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-29983

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description The issue concerns an out-of-bound vmalloc access in the imageblit function of the tty subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26009

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description The issue concerns an out-of-bound vmalloc access in the imageblit function of the tty subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free

A locking vulnerability was found in the tty subsystem of the Linux kernel in drivers/tty/ttyjobctrl.c. This flaw allows a local attacker to possibly corrupt memory or escalate privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Oracle Linux 6 : kernel (ELSA-2021-9212)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9212 advisory. 2.6.32-754.35.1.0.3.OL6 - Fixes for RHSA-2021:1288 Orabug: 32809880 Tenable has extracted the preceding description block directly from the Oracle Linu...

kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free

A locking vulnerability was found in the tty subsystem of the Linux kernel in drivers/tty/ttyjobctrl.c. This flaw allows a local attacker to possibly corrupt memory or escalate privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free

A locking vulnerability was found in the tty subsystem of the Linux kernel in drivers/tty/ttyjobctrl.c. This flaw allows a local attacker to possibly corrupt memory or escalate privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...