PT-2021-26534

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.77 Description A memory leak issue was discovered, potentially affecting the security of the system. The issue is related to a missing cgroup bpf offline call. The actual impact and attack plausibility have...

PT-2021-30529

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.77 Description A memory leak issue was discovered, potentially affecting the security of the system. The issue is related to a missing cgroup bpf offline and was introduced in version v5.10. The actual impa...

PT-2021-26668

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.15 Description: A memory leak issue was discovered, caused by missing cgroup bpf offline. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-30663

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.15 Description A memory leak issue was discovered, caused by missing cgroup bpf offline. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.10...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in __bpf_object__open

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=5747922482888704 Project: libbpf Fuzzing Engine: afl Fuzz Target: bpf-object-fuzzer Job Type: aflasanlibbpf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x603000000118...

libbpf:bpf-object-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6033144516575232 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerubsanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f640000002b Crash State: NULL Sanitizer: undefined UBSAN...

Ubuntu: Security Advisory (USN-5137-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_putl32

Detailed Report: https://oss-fuzz.com/testcase?key=6319028142997504 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60600000005b Crash State: bfdputl32...

LSN-0082-1: Kernel Live Patch Security Notice

Jann Horn discovered that the tty subsystem of the Linux kernel did not use consistent locking in some situations, leading to a read-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly expose sensitive information kernel...

USN-5137-2 linux-bluefield, linux-gke-5.4, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

USN-5137-2: Linux kernel vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

LSN-0082-1 Kernel Live Patch Security Notice

Jann Horn discovered that the tty subsystem of the Linux kernel did not use consistent locking in some situations, leading to a read-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly expose sensitive information kernel...

OSV-2021-1562 Heap-buffer-overflow in __bpf_object__open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868 Crash type: Heap-buffer-overflow WRITE 4 Crash state: bpfobjectopen bpfobjectopenmem bpf-object-fuzzer.c...

PT-2021-27891

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 4 crash has been reported. The crash occurs in the bpf object open function, specifically when calling bpf object open mem in...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-2688)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypa...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-2713)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypa...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5137-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5137-2 advisory. It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use...

Ubuntu: Security Advisory (USN-5137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libbpf:bpf-object-fuzzer: Use-of-uninitialized-value in __bpf_object__open

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6255174864207872 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzermsanlibbpf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

kernel: heap overflow in __cgroup_bpf_run_filter_getsockopt()

A flaw buffer overflow in the Linux kernel BPF subsystem was found in the way user running BPF script calling getsockopt. A local user could use this flaw to crash the system or possibly escalate their privileges on the system...