Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5165-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5165-1 advisory. It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface NCI implementation....

AMD Graphics Driver for Windows 10 Buffer Overflow Vulnerability (CNVD-2021-95626)

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver for Windows 10 suffers from a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary information disclosure...

Ubuntu: Security Advisory (USN-5165-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AMD μProf 安全漏洞

AMD μProf is a performance analysis tool from AMD for applications running on Windows, Linux and FreeBSD operating systems. A security vulnerability exists in AMD μProf, which stems from the fact that the AMDPowerProfiler.sys driver may allow a low-privileged user to access the MSR in the kernel,...

AMD Graphics Driver for Windows 10 Information Disclosure Vulnerability

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver for Windows 10 suffers from an information disclosure vulnerability that can be exploited by attackers to cause a KASLR bypass...

AMD Graphics Driver for Windows 10 Buffer Overflow Vulnerability

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver for Windows 10 suffers from a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary information disclosure...

USN-5165-1: Linux kernel (OEM) vulnerabilities

It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface NCI implementation. A local attacker could possibly use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3760 It was discovered...

USN-5164-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the Option USB High Speed Mobile device driver in the Linux kernel did not properly handle error conditions. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-37159 It was discovered that th...

USN-5164-1: Linux kernel vulnerabilities

It was discovered that the Option USB High Speed Mobile device driver in the Linux kernel did not properly handle error conditions. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-37159 It was discovered that th...

USN-5163-1: Linux kernel vulnerabilities

Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the Option USB Hi...

USN-5162-1: Linux kernel vulnerabilities

Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the AMD...

USN-5161-1: Linux kernel vulnerabilities

Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the AMD...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9564)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9564 advisory. - LTS tag: v5.4.142 Jack Vogel CVE-2021-3653 CVE-2021-3656 - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested CVE-2021-3656 Maxim Levitsky -...

Virtuozzo ReadyKernel patch 135.0 for Virtuozzo Hybrid Server 7.5

The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to the kernels 3.10.0-1160.21.1.vz7.174.13 Virtuozzo Hybrid Server 7.5 Update 1, 3.10.0-1160.41.1.vz7.183.5 Virtuozzo Hybrid Server 7.5 Update 2. Vulnerability id: PSBM-131551 3.10.0-1160.21.1.vz7.174.1...

AMD Graphics Driver Input Validation Error Vulnerability

AMD Graphics Driver is an integrated graphics driver from AMD. An input validation error vulnerability exists in AMD Graphics Driver, which can be exploited by attackers to bypass security restrictions and enable arbitrary code execution...

AMD Graphics Driver for Windows 10 Input Validation Error Vulnerability

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver for Windows 10 is vulnerable to an input validation error that stems from the product's amdfender.sys failing to properly process input data, which could be exploited by an attacker to cause a denial of service...

Unspecified Vulnerability in AMD Graphics Driver

AMD Graphics Driver is an integrated graphics driver from AMD. A security vulnerability exists in AMD Graphics Driver, which is caused due to an issue with the Escape call interface for privilege restrictions in the Windows AMD Graphics Driver, and can be exploited by an attacker to cause an...

CVE-2021-26330

AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...

CVE-2021-26331

AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...

CVE-2021-26335

Improper input and range checking in the AMD Secure Processor ASP boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution...