19 matches found
Astra Linux - уязвимость в linux, linux-5.10
In unixscmtoskb of afunix.c, there is a potential issue after the free function due to a race condition. This could lead to a local escalation of privileges, as system execution privileges are required. User interaction is not necessary for exploiting this vulnerability. Product: Android Versions...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001405)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001405 advisory. In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001928)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001928 advisory. Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AFUNIX socket permissions or cause a denial ...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002114)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002114 advisory. Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AFUNIX socket permissions or cause a denial ...
CVE-2024-26780 af_unix: Fix task hung while purging oob_skb in GC.
In the Linux kernel, the following vulnerability has been resolved: afunix: Fix task hung while purging oobskb in GC. syzbot reported a task hung; at the same time, GC was looping infinitely in listforeachentrysafe for OOB skb. 0 syzbot demonstrated that the listforeachentrysafe was not actually...
Linux Kernel BPF af_unix.c unix_release_sock memory leak
...
UBUNTU-CVE-2022-3543
A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unixsockdestructor/unixreleasesock of the file net/unix/afunix.c of the component BPF. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue...
CVE-2022-3543 Linux Kernel BPF af_unix.c unix_release_sock memory leak
A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unixsockdestructor/unixreleasesock of the file net/unix/afunix.c of the component BPF. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue...
SUSE SLES15 Security Update : kernel (Live Patch 25 for SLE 15 SP2) (SUSE-SU-2022:0996-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0996-1 advisory. - In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of...
The vulnerability of the unix_scm_to_skb function (af_unix.c) in the Android operating system’s kernel allows a hacker to increase their privileges.
The vulnerability of the unixscmtoskb function afunix.c in the Android operating system kernel arises from the simultaneous execution using shared resources with incorrect synchronization in the “Race Situation” mode. Exploiting this vulnerability can allow an attacker to increase their privilege...
Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2022-9011)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-9011 advisory. - xfs: map unwritten blocks in XFSIOCALLOC,FREESP just like fallocate Darrick J. Wong Orabug: 33722441 CVE-2021-4155 - fget: check that the fd still...
DEBIAN-CVE-2021-0920
In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
UBUNTU-CVE-2021-0920
In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2021-0920
CVE-2021-0920 is confirmed with concrete details in the connected sources: a race condition in unix_scm_to_skb within af_unix.c can trigger a use-after-free, potentially enabling local privilege escalation on the Android kernel. The vulnerability affects the Linux kernel used in Android (via the ...
CVE-2021-0920
In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2021-0920
In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
ASB-A-196926917
In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
F5 Networks BIG-IP : Linux kernel vulnerability (K20022580)
Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AFUNIX socket permissions or cause a denial of service panic via crafted epollctl calls. CVE-2013-7446 C Tenable Network Security, Inc. The descriptive text and package checks ...
CVE-2013-7446
CVE-2013-7446 is a use-after-free vulnerability in the Linux kernel (net/unix/af_unix.c) up to version 4.3.2, fixed in 4.3.3. It allows local attackers to bypass AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls. Affected: Linux kernel before 4.3.3 (inclu...