PT-2022-38118

Уязвимость функции ftrace make nop модуля arch/arm64/kernel/ftrace.c поддержки платформы ARM 64бит ядра операционной системы Linux связана с некорректной инициализацией ресурса. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...

PT-2022-37981

Уязвимость функции get ftrace plt модуля arch/arm64/kernel/ftrace.c поддержки платформы ARM 64-бит ядра операционной системы Linux связана с некорректной зачисткой или освобождением ресурсов. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-37952

Уязвимость функции bpf int jit compile модуля arch/arm64/net/bpf jit comp.c поддержки сети на платформе ARM 64бит ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-29962

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.15.33 Description The issue concerns a problem with topology initialization for core scheduling in the arch/arm64 component of the Linux Kernel. The actual impact and potential for attack have not been...

PT-2022-29635

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.16.19 Description The issue concerns a problem with topology initialization for core scheduling in the arch/arm64 component of the Linux Kernel. The actual impact and potential for attack have not been...

PT-2022-29290

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.17.2 Description The issue concerns a problem with topology initialization for core scheduling in the arch/arm64 component of the Linux Kernel. The actual impact and potential for attack have not been...

CVE-2018-18021: Improper Input Validation

arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVMSETONREG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control with full register control. An attacker ca...

PT-2018-3623

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.12 on the arm64 platform Description The issue is related to the KVM subsystem in the Linux kernel, specifically in the arch/arm64/kvm/guest.c file. It is caused by insufficient restrictions on userspace...

CVE-2017-12168

The accesspmuevcntr function in arch/arm64/kvm/sysregs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service assertion failure and host OS crash by accessing the Performance Monitors Cycle Count Register PMCCNTR...

CVE-2017-12168: Reachable Assertion

The accesspmuevcntr function in arch/arm64/kvm/sysregs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service assertion failure and host OS crash by accessing the Performance Monitors Cycle Count Register PMCCNTR...

CVE-2015-8967

arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict page permissions" protection mechanism and modify the system-call table, and consequently gain privileges, by leveraging write access...

CVE-2015-8967: Undefined Security Weakness

arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict page permissions" protection mechanism and modify the system-call table, and consequently gain privileges, by leveraging write access...

CVE-2014-9803

arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28557020...

CVE-2014-9803: Undefined Security Weakness

arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28557020...

PT-2016-4066

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.0.3 Description The issue allows local users to obtain sensitive information from kernel memory. This is due to the failure to initialize certain data structures in the arch/arm64/mm/dma-mapping.c file, which c...

CVE-2014-7843: Undefined Security Weakness

The clearuser function in arch/arm64/lib/clearuser.S in the Linux kernel before 3.17.4 on the ARM64 platform allows local users to cause a denial of service system crash by reading one byte beyond a /dev/zero page boundary...

CVE-2013-4220

The badmode function in arch/arm64/kernel/traps.c in the Linux kernel before 3.9.5 on the ARM64 platform allows local users to cause a denial of service system crash via vectors involving an attempted register access that triggers an unexpected value in the Exception Syndrome Register ESR...

CVE-2013-4220: Undefined Security Weakness

The badmode function in arch/arm64/kernel/traps.c in the Linux kernel before 3.9.5 on the ARM64 platform allows local users to cause a denial of service system crash via vectors involving an attempted register access that triggers an unexpected value in the Exception Syndrome Register ESR...