Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4425-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4425-1 advisory. It was discovered that the network block device nbd implementation in the Linux kernel did not properly check for error conditions in some...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

Design/Logic Flaw

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

CVE-2020-15368

CVE-2020-15368 involves ASRock RGB Driver’s AsrDrv103.sys, which fails to restrict user-space access. The Red Hat advisory and other sources confirm the issue can be triggered via a crafted request to CR3, enabling kernel-level code execution (e.g., triple fault scenario) and potential post-explo...

Moderate: Red Hat Security Advisory: dpdk security, bug fix, and enhancement update

An update for dpdk is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Remote code execution

In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used for HID items if the push/pop level is not restored within the processing of that HID item allowing an attacker with...

[SECURITY] Fedora 32 Update: dpdk-19.11.1-2.fc32

The Data Plane Development Kit is a set of libraries and drivers for fast packet processing in the user space...

NVIDIA Display driver competitive conditions issue vulnerability

NVIDIA graphics driver is a graphics driver from the American company NVIDIA. A competing condition issue vulnerability exists in NVIDIA Display driver Linux versions prior to 295.53. An attacker could exploit this vulnerability to leak kernel memory into user space...

CVE-2020-3653

Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850...

CVE-2019-10622

Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. Two flaws were found in the way the Linux kernel's syssendmsg function, when invoked via the sendmmsg system call, accessed user-space memory. A local, unprivileged user could use these flaws to cause a denial of service...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists due to the structure padding in two structures in the Bluetooth implementation was not initialized properly before being copied to user-space, possibly allowing local, unprivileged users to leak kernel stack memory to...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists as flaws were found in the tpacketrcv and packetrecvmsg functions in the Linux kernel. A local, unprivileged user could use these flaws to leak information to user-space...

Information Disclosure

kernel is vulnerable to information disclosure. Information leak flaws were found in the Linux kernel's Traffic Control Unit implementation. A local attacker could use these flaws to cause the kernel to leak kernel memory to user-space, possibly leading to the disclosure of sensitive information...

Information Disclosure

kernel is vulnerable to information disclosure. A flaw was found in the tcfactpolicedump function in the Linux kernel network traffic policing implementation. A data structure in tcfactpolicedump was not initialized properly before being copied to user-space. A local, unprivileged user could use...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as the compatallocuserspace function in the Linux kernel 32/64-bit compatibility layer implementation was missing sanity checks. This function could be abused in other areas of the Linux kernel if its length argument can be...

Information Disclosure

kernel is vulnerable to information disclosure. The padding data in several core network structures was not initialized properly before being sent to user-space, possibly leading to information leaks...