Lucene search
K

19 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux - уязвимость в linux, linux-5.10

In unixscmtoskb of afunix.c, there is a potential issue after the free function due to a race condition. This could lead to a local escalation of privileges, as system execution privileges are required. User interaction is not necessary for exploiting this vulnerability. Product: Android Versions...

6.9CVSS6.9AI score0.00811EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.1 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001405 advisory. In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution...

6.9CVSS6.7AI score0.00811EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001928)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001928 advisory. Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AFUNIX socket permissions or cause a denial ...

5.4CVSS6.5AI score0.0063EPSS
Exploits1References56
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002114)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002114 advisory. Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AFUNIX socket permissions or cause a denial ...

5.4CVSS6.5AI score0.0063EPSS
Exploits1References56
Cvelist
Cvelist
added 2024/04/04 8:20 a.m.18 views

CVE-2024-26780 af_unix: Fix task hung while purging oob_skb in GC.

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix task hung while purging oobskb in GC. syzbot reported a task hung; at the same time, GC was looping infinitely in listforeachentrysafe for OOB skb. 0 syzbot demonstrated that the listforeachentrysafe was not actually...

7.8AI score0.00222EPSS
Exploits0References5
Microsoft CVE
Microsoft CVE
added 2022/10/19 7:0 a.m.1 views

Linux Kernel BPF af_unix.c unix_release_sock memory leak

...

5.5CVSS7AI score0.0026EPSS
Exploits0
OSV
OSV
added 2022/10/17 12:15 p.m.1 views

UBUNTU-CVE-2022-3543

A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unixsockdestructor/unixreleasesock of the file net/unix/afunix.c of the component BPF. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue...

5.5CVSS5.6AI score0.0026EPSS
Exploits0References11
Cvelist
Cvelist
added 2022/10/17 12:0 a.m.19 views

CVE-2022-3543 Linux Kernel BPF af_unix.c unix_release_sock memory leak

A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unixsockdestructor/unixreleasesock of the file net/unix/afunix.c of the component BPF. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue...

3.5CVSS7.1AI score0.0026EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/03/30 12:0 a.m.60 views

SUSE SLES15 Security Update : kernel (Live Patch 25 for SLE 15 SP2) (SUSE-SU-2022:0996-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0996-1 advisory. - In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of...

6.9CVSS6.8AI score0.00811EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/02/17 12:0 a.m.2 views

The vulnerability of the unix_scm_to_skb function (af_unix.c) in the Android operating system’s kernel allows a hacker to increase their privileges.

The vulnerability of the unixscmtoskb function afunix.c in the Android operating system kernel arises from the simultaneous execution using shared resources with incorrect synchronization in the “Race Situation” mode. Exploiting this vulnerability can allow an attacker to increase their privilege...

6.4CVSS6.8AI score0.00811EPSS
Exploits0References7Affected Software4
Tenable Nessus
Tenable Nessus
added 2022/01/10 12:0 a.m.65 views

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2022-9011)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-9011 advisory. - xfs: map unwritten blocks in XFSIOCALLOC,FREESP just like fallocate Darrick J. Wong Orabug: 33722441 CVE-2021-4155 - fget: check that the fd still...

6.9CVSS6.9AI score0.00811EPSS
Exploits0References3
OSV
OSV
added 2021/12/15 7:15 p.m.1 views

DEBIAN-CVE-2021-0920

In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.4CVSS6.7AI score0.00811EPSS
Exploits0References1
OSV
OSV
added 2021/12/15 7:15 p.m.2 views

UBUNTU-CVE-2021-0920

In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.4CVSS6.8AI score0.00811EPSS
Exploits0References7
CVE
CVE
added 2021/12/15 6:5 p.m.1443 views

CVE-2021-0920

CVE-2021-0920 is confirmed with concrete details in the connected sources: a race condition in unix_scm_to_skb within af_unix.c can trigger a use-after-free, potentially enabling local privilege escalation on the Android kernel. The vulnerability affects the Linux kernel used in Android (via the ...

6.9CVSS7.1AI score0.00811EPSS
In wildExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2021/12/15 6:5 p.m.58 views

CVE-2021-0920

In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.9CVSS6.6AI score0.00811EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2021/12/15 12:0 a.m.148 views

CVE-2021-0920

In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.9CVSS6AI score0.00811EPSS
In wildExploits0References3
OSV
OSV
added 2021/11/01 12:0 a.m.87 views

ASB-A-196926917

In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.9CVSS7.3AI score0.00811EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2017/05/02 12:0 a.m.42 views

F5 Networks BIG-IP : Linux kernel vulnerability (K20022580)

Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AFUNIX socket permissions or cause a denial of service panic via crafted epollctl calls. CVE-2013-7446 C Tenable Network Security, Inc. The descriptive text and package checks ...

5.4CVSS6.5AI score0.0063EPSS
Exploits1References2
CVE
CVE
added 2015/12/28 11:0 a.m.147 views

CVE-2013-7446

CVE-2013-7446 is a use-after-free vulnerability in the Linux kernel (net/unix/af_unix.c) up to version 4.3.2, fixed in 4.3.3. It allows local attackers to bypass AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls. Affected: Linux kernel before 4.3.3 (inclu...

5.4CVSS5.9AI score0.0063EPSS
Exploits1References53Affected Software1
Rows per page
Query Builder