polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync()

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this...

polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync()

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this...

CVE-2021-3560

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this...

UBUNTU-CVE-2021-3560

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this...

PT-2021-3362

Name of the Vulnerable Software and Affected Versions Polkit versions prior to 0.119 Description It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivilege...

Polkit D-Bus Authentication Bypass

A vulnerability exists within the polkit system service that can be leveraged by a local, unprivileged attacker to perform privileged operations. In order to leverage the vulnerability, the attacker invokes a method over D-Bus and kills the client process. This will occasionally cause the operati...

polkit -- local privilege escalation using polkit_system_bus_name_get_creds_sync

Cedric Buissart reports: The function polkitsystembusnamegetcredssync is used to get the uid and pid of the process requesting the action. It does this by sending the unique bus name of the requesting process, which is typically something like ":1.96", to dbus-daemon. These unique names are...

DEBIAN-CVE-2020-27661

A divide-by-zero issue was found in dwc2handlepacket in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service...

CVE-2020-35503

CVE-2020-35503 affects QEMU’s megasas-gen2 SCSI host bus adapter emulation. A NULL pointer dereference in megasas_command_cancelled() during dropping a SCSI request can crash the QEMU process on the host, causing a denial of service. The description specifies this is a local/privileged-guest flaw...

openSUSE: Security Advisory for gstreamer, (openSUSE-SU-2021:0822-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

kernel: malicious USB devices can lead to multiple out-of-bounds write

An out-of-bounds write flaw was found in the Linux kernel’s HID drivers. An attacker, able to plug in a malicious USB device, can crash the system or read and write to memory with an incorrect address...

GSD-2021-1000439 KVM: Stop looking for coalesced MMIO zones if the bus is destroyed

KVM: Stop looking for coalesced MMIO zones if the bus is destroyed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

GSD-2021-1000299 KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU

KVM: Destroy I/O bus devices on unregister failure after sync'ing SRCU This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000395 KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU

KVM: Destroy I/O bus devices on unregister failure after sync'ing SRCU This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000296 KVM: Stop looking for coalesced MMIO zones if the bus is destroyed

KVM: Stop looking for coalesced MMIO zones if the bus is destroyed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000296 KVM: Stop looking for coalesced MMIO zones if the bus is destroyed

KVM: Stop looking for coalesced MMIO zones if the bus is destroyed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000439 KVM: Stop looking for coalesced MMIO zones if the bus is destroyed

KVM: Stop looking for coalesced MMIO zones if the bus is destroyed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

GSD-2021-1000122 bus: mhi: pci_generic: Remove WQ_MEM_RECLAIM flag from state workqueue

bus: mhi: pcigeneric: Remove WQMEMRECLAIM flag from state workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000395 KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU

KVM: Destroy I/O bus devices on unregister failure after sync'ing SRCU This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000394 KVM: Stop looking for coalesced MMIO zones if the bus is destroyed

KVM: Stop looking for coalesced MMIO zones if the bus is destroyed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...