Lucene search
+L

687 matches found

OSV
OSV
•added 2022/03/18 12:28 a.m.•6 views

GSD-2022-1000886 configfs: fix a race in configfs_{,un}register_subsystem()

configfs: fix a race in configfs,unregistersubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/03/18 12:24 a.m.•12 views

GSD-2022-1000855 configfs: fix a race in configfs_{,un}register_subsystem()

configfs: fix a race in configfs,unregistersubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/03/18 12:19 a.m.•12 views

GSD-2022-1000802 configfs: fix a race in configfs_{,un}register_subsystem()

configfs: fix a race in configfs,unregistersubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/03/18 12:13 a.m.•11 views

GSD-2022-1000735 configfs: fix a race in configfs_{,un}register_subsystem()

configfs: fix a race in configfs,unregistersubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•1 views

PT-2022-29160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•2 views

PT-2022-29076

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. This issue was...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•2 views

PT-2022-29205

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.269 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•0 views

PT-2022-29224

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•2 views

PT-2022-29009

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•1 views

PT-2022-29129

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•1 views

PT-2022-29185

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.232 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

5.7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2022/03/02 12:00 a.m.•253 views

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1308)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege wi...

7.8CVSS6.8AI score0.00867EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2022/02/22 12:00 a.m.•43 views

PT-2022-7490 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a race condition in the configfs component of the Linux kernel. When configfs register subsystem or configfs unregister subsystem is executing link grou...

8.8CVSS6.1AI score0.01915EPSS
SaveExploits16References1677
attackerkb
attackerkb
•added 2021/12/15 7:15 p.m.•10 views

CVE-2021-39656

In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.7CVSS6.8AI score0.00124EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/15 7:15 p.m.•9 views

CVE-2021-39648

In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

4.1CVSS6.9AI score0.00167EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/15 7:15 p.m.•12 views

UBUNTU-CVE-2021-39656

In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.7CVSS6.8AI score0.00124EPSS
SaveExploits0References4
OSV
OSV
•added 2021/12/15 7:15 p.m.•15 views

UBUNTU-CVE-2021-39648

In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

4.1CVSS6.8AI score0.00167EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2021/12/15 6:05 p.m.•35 views

CVE-2021-39648

In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

5.7AI score0.00167EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•1 views

PT-2021-22699

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible use-after-free due to improper locking in the configfs open file function of file.c. This could lead to local escalation of privilege in t...

6.7CVSS0.00124EPSS
SaveExploits0References21
CNNVD
CNNVD
•added 2021/12/06 12:00 a.m.•16 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A memory misreference vulnerability exists in the Kernel in Google Android. The vulnerability stems from a mis-locked configfsopenfile in file.c that is reused after release. An attacker with system execution privileges cou...

6.7CVSS5.8AI score0.00124EPSS
SaveExploits0References4
Rows per page
Query Builder