GSD-2021-1001187 arch_topology: Avoid use-after-free for scale_freq_data

archtopology: Avoid use-after-free for scalefreqdata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

PT-2021-29833

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and attack plausibility of this issue have not...

PT-2021-29777

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.136 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2021-29709

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.10.53 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function when handling vcpu load. The actual impact and attack plausibility have not yet been proven. This issue...

PT-2021-29652

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.13.3 Description The issue concerns an use-after-free in the arch topology for scale freq data. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-29628

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.13.5 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl vcpu load function. The actual impact and attack plausibility have not yet been proven. This issue was introduced ...

PT-2021-25714

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.10.53 Description A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and likelihood of an attack have not been...

PT-2021-25782

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.136 Description The issue is related to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. This problem was introduced in version v4.18 and is fixed in Linux Kernel version...

PT-2021-25838

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description The issue is related to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and potential for attack have not been fully determined...

PT-2021-25657

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.13.3 Description: The issue concerns a use-after-free condition in the arch topology for scale freq data. This problem was introduced in version v5.13 and is fixed in version v5.13.4. The actual impact a...

PT-2021-25633

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.18 through 5.13.5 Description: A potential security issue exists due to a leak in the kvm arch vcpu ioctl function, specifically in the vcpu load operation. The actual impact and likelihood of an attack have not been...

Arch Linux 信任管理问题漏洞

Arch Linux is an application system from Arch Open Source. A lightweight and flexible Linux® distribution that tries to keep it simple. A trust management issue vulnerability exists in Arch Linux that stems from the product's failure to adequately protect credentials. A remote attacker could...

Arch Linux 代码问题漏洞

Arch Linux is an application system from Arch Open Source. A lightweight and flexible Linux® distribution that tries to keep it simple. A code issue vulnerability exists in Arch Linux that stems from a failure to adequately validate user-entered XML data, which could allow an attacker to pass...

[ASA-202107-48] linux: privilege escalation

Arch Linux Security Advisory ASA-202107-48 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-3609 CVE-2021-3612 CVE-2021-33909 Package : linux Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-2181 Summary ======= The...

[ASA-202107-60] lib32-curl: multiple issues

Arch Linux Security Advisory ASA-202107-60 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-22924 CVE-2021-22925 Package : lib32-curl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2195 Summary ======= The package...

Arch Linux 安全漏洞

Arch Linux is an application system from Arch Open Source. A lightweight and flexible Linux® distribution that tries to keep it simple. A security vulnerability exists in Arch Linux that stems from the use of uninitialized variables when processing TELNET requests and parsing NEWENV, which can be...

[ASA-202107-45] telegram-desktop: content spoofing

Arch Linux Security Advisory ASA-202107-45 ========================================== Severity: Low Date : 2021-07-20 CVE-ID : CVE-2021-36769 Package : telegram-desktop Type : content spoofing Remote : Yes Link : https://security.archlinux.org/AVG-2170 Summary ======= The package telegram-desktop...

PT-2024-11297

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a leak in kvm arch vcpu ioctl vcpu load due to vcpu put not being called if the user copy fails. This can result in preempt notifier corruption and crashes, among...

[ASA-202107-31] vivaldi: arbitrary code execution

Arch Linux Security Advisory ASA-202107-31 ========================================== Severity: High Date : 2021-07-16 CVE-ID : CVE-2021-30541 CVE-2021-30559 CVE-2021-30560 CVE-2021-30561 CVE-2021-30562 CVE-2021-30563 CVE-2021-30564 Package : vivaldi Type : arbitrary code execution Remote : Yes...

[ASA-202107-29] systemd: denial of service

Arch Linux Security Advisory ASA-202107-29 ========================================== Severity: Low Date : 2021-07-14 CVE-ID : CVE-2020-13529 Package : systemd Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1935 Summary ======= The package systemd before version...