22 matches found
The vulnerability of the zpci_device_reserved() function in the arch/s390/pci/pci.c module of the S390 platform support module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the zpcidevicereserved function in the arch/s390/pci/pci.c module of the S390 platform support library in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability in the `arch/s390/boot/vmem.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the arch/s390/boot/vmem.c component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a system failure...
The vulnerability of the arch/s390 kernel component of the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the arch/s390 kernel component in the Linux operating system is related to the provision of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the __poke_user() function in the arch/s390/kernel/ptrace.c module of the Linux operating system allows a hacker to gain access to protected information or cause a service failure.
The vulnerability of the pokeuser function in the arch/s390/kernel/ptrace.c module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access protected information or cause service interruptions...
The vulnerability of the startup_kernel() function in the arch/s390/boot/startup.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the startupkernel function in the arch/s390/boot/startup.c module of the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-13336
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to an invalid out of bounds read warning generated by GCC 11.1.0 and 11.2.0 when compiling the kernel. The issue arises fro...
PT-2024-41798
Уязвимость функции zpci device reserved модуля arch/s390/pci/pci.c поддержки платформы S390 ядра операционной системы Linux связана с повторным использованием ранее освобожденной памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и...
The vulnerability in the `arch/s390/boot/decompressor.c` component of the Linux operating system, related to copying buffers without checking the input data, allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability in the arch/s390/boot/decompressor.c component of the Linux operating system involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
PT-2024-41821
Уязвимость функции load fpu state модуля arch/s390/kernel/fpu.c поддержки платформы S390 ядра операционной системы Linux связана с недостатками в обработке исключительных состояний. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2023-36775
Уязвимость функции chacha crypt arch модуля arch/s390/crypto/chacha-glue.c поддержки платформы S390 ядра операционной системы Linux связана с неправильным отключением или освобождением ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2022-38100
Уязвимость функции get wchan модуля arch/s390/include/asm/processor.h поддержки платформы S390 ядра операционной системы Linux связана с переполнением буфера на основе стека. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...
UBUNTU-CVE-2022-0516
A vulnerability was found in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4...
CVE-2022-0516: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4...
PT-2021-2549
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.7 Description: The issue is caused by a buffer overflow in the Kernel-based Virtual Machine KVM subsystem of the Linux kernel, specifically affecting components arch/s390/kvm/kvm-s390.c, include/linux/kvm...
CVE-2020-11884
In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enablesacfuaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur...
CVE-2020-11884: Concurrent Execution using Shared Resource with Improper Synchronization
In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enablesacfuaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur...
Design/Logic Flaw
The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service system crash or possibly have unspecified other impact via a crafted application, related to...
CVE-2016-2143: Improper Input Validation
The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service system crash or possibly have unspecified other impact via a crafted application, related to...
CVE-2014-3534: Improper Privilege Management
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACEPOKEUSRAREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a...
CVE-2014-2039: Improper Input Validation
arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service system crash by executing a crafted instruction...