SUSE SLES12 Security Update : kernel (Live Patch 25 for SLE 12 SP5) (SUSE-SU-2021:4021-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4021-1 advisory. This update for the Linux Kernel 4.12.14-12298 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

SUSE SLES12: kernel-livepatch-4_12_14-150_75-default / etc (SUSE-SU-2021:4038-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4038-1 advisory. This update for the Linux Kernel 4.12.14-12291 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

CVE-2021-0929: Use After Free

In iondmabufendcpuaccess and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2021-22696

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to an incorrect bounds check in the sec ts parsing cmds function, which could lead to a possible out of bounds write. This may result in local escalatio...

CVE-2021-39656: Use After Free

In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39644: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A...

PT-2021-22690

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to the Android kernel. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this...

PT-2021-13373

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the quota proc write function in xt quota2.c, where uninitialized data can lead to reading kernel memory. This could result in local information disclosure, requiring System execution privileg...

PT-2021-13442

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read due to memory corruption, which could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary fo...

PT-2021-13443

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible disclosure of freed kernel heap memory due to a use after free in the dsi panel debugfs read cmdset function of dsi panel.c. This could lead to local information disclosure, requiri...

PT-2021-22695

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue allows access to PIN protected settings without PIN confirmation due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2021-1045: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A...

PT-2021-1520

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to the USB gadget subsystem of the Linux kernel, which provides a software interface for creating client USB devices and simulating USB devices. It involv...

PT-2021-1514

Name of the Vulnerable Software and Affected Versions Linux kernel versions affected versions not specified Android kernel versions affected versions not specified Description The issue is related to a use after free memory corruption in the kernel/sched/wait.c component of the Linux operating...

Google Android Resource Management Vulnerability

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in the Google Android Kernel. The vulnerability stems from an out-of-bounds write in periodicioworkfunc in lwisperiodicio.c due to reuse after release. An attacker can exploit...

Google Android Buffer Overflow Vulnerability

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in the Google Android Kernel. The vulnerability stems from an out-of-bounds write due to improper locking in the dwc3gadgetep0queue of ep0.c. An attacker could use this...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. A memory misreference vulnerability exists in the Kernel in Google Android. The vulnerability stems from a mis-locked configfsopenfile in file.c that is reused after release. An attacker with system execution privileges cou...

Google Android competition conditions bug

Google Android is a Linux-based open source operating system from Google. A vulnerability exists in the Google Android Kernel for a race condition issue. The vulnerability stems from an out-of-bounds write due to a race condition in synchronousprocessioentries in lwisioctl.c. The vulnerability ca...

Android kernel binderTransaction Privilege Escalation

The vulnerability in the implementation of the binderTransaction function in Android operating system kernels relates to the execution of write operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

OESA-2021-1433 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packe...