687 matches found
GSD-2022-1000886 configfs: fix a race in configfs_{,un}register_subsystem()
configfs: fix a race in configfs,unregistersubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...
GSD-2022-1000855 configfs: fix a race in configfs_{,un}register_subsystem()
configfs: fix a race in configfs,unregistersubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...
GSD-2022-1000802 configfs: fix a race in configfs_{,un}register_subsystem()
configfs: fix a race in configfs,unregistersubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...
GSD-2022-1000735 configfs: fix a race in configfs_{,un}register_subsystem()
configfs: fix a race in configfs,unregistersubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...
PT-2022-29160
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-29076
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. This issue was...
PT-2022-29205
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.269 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...
PT-2022-29224
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-29009
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-29129
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...
PT-2022-29185
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.232 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...
EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1308)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege wi...
PT-2022-7490 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a race condition in the configfs component of the Linux kernel. When configfs register subsystem or configfs unregister subsystem is executing link grou...
CVE-2021-39656
In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2021-39648
In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
UBUNTU-CVE-2021-39656
In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
UBUNTU-CVE-2021-39648
In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
CVE-2021-39648
In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
PT-2021-22699
Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible use-after-free due to improper locking in the configfs open file function of file.c. This could lead to local escalation of privilege in t...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. A memory misreference vulnerability exists in the Kernel in Google Android. The vulnerability stems from a mis-locked configfsopenfile in file.c that is reused after release. An attacker with system execution privileges cou...