2127 matches found
CVE-2023-22436 The kernel subsystem function check_permission_for_set_tokenid has an UAF vulnerability.
The kernel subsystem function checkpermissionforsettokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root...
CVE-2023-22436
The CVE-2023-22436 entry describes a local UAF (Use-After-Free) vulnerability in the kernel subsystem function check_permission_for_set_tokenid affecting OpenHarmony v3.1.5 and earlier . Successful exploitation can escalate privileges to root . The issue is rooted in the kernel’s token-related pe...
curl: CVE-2023-27537: HSTS double-free
A double-free vulnerability CVE-2023-27537 existed in libcurl's HSTS HTTP Strict Transport Security implementation due to a lack of exclusion control when processing HSTS with multi-threading. This could lead to a use-after-free UAF issue when other threads access entries. An attacker could explo...
CVE-2022-40016
The CVE-2022-40016 entry describes a Use After Free (UAF) in the ireader media-server code path using librtmp, before commit 3e0f63f1d3553f75c7d4eb32fa7c7a1976a9ff84. Impact: denial of service with HIGH severity per CVSS data. Affected component is the media-server’s use of librtmp; root cause is...
GSD-2023-1002276 drm/virtio: Fix GEM handle creation UAF
drm/virtio: Fix GEM handle creation UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.270 by commit...
GSD-2023-1002249 net: fix UaF in netns ops registration error path
net: fix UaF in netns ops registration error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.272 by commit...
GSD-2023-1002244 drm/virtio: Fix GEM handle creation UAF
drm/virtio: Fix GEM handle creation UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...
GSD-2023-1002205 net: fix UaF in netns ops registration error path
net: fix UaF in netns ops registration error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.231 by commit...
GSD-2023-1002195 drm/virtio: Fix GEM handle creation UAF
drm/virtio: Fix GEM handle creation UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...
GSD-2023-1002142 net: fix UaF in netns ops registration error path
net: fix UaF in netns ops registration error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...
GSD-2023-1002131 drm/virtio: Fix GEM handle creation UAF
drm/virtio: Fix GEM handle creation UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...
GSD-2023-1002043 block, bfq: fix uaf for bfqq in bic_set_bfqq()
block, bfq: fix uaf for bfqq in bicsetbfqq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.93 by commit...
GSD-2023-1002036 vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
vcscreen: move load of struct vcdata pointer in vcsread to avoid UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.93 by commit...
GSD-2023-1002034 scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
scsi: iscsitcp: Fix UAF during logout when accessing the shost ipaddress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.93 by commit...
GSD-2023-1002033 scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
scsi: iscsitcp: Fix UAF during login when accessing the shost ipaddress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.93 by commit...
GSD-2023-1001903 net: fix UaF in netns ops registration error path
net: fix UaF in netns ops registration error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...
GSD-2023-1001882 block, bfq: fix uaf for bfqq in bic_set_bfqq()
block, bfq: fix uaf for bfqq in bicsetbfqq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...
GSD-2023-1001872 scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
scsi: iscsitcp: Fix UAF during logout when accessing the shost ipaddress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...
GSD-2023-1001871 scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
scsi: iscsitcp: Fix UAF during login when accessing the shost ipaddress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...