Lucene search
K

283 matches found

Debian CVE
Debian CVE
added 2022/03/25 6:2 p.m.44 views

CVE-2021-4202

A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem...

7CVSS6.9AI score0.0008EPSS
Exploits1
Cloud Foundry
Cloud Foundry
added 2022/03/11 12:0 a.m.53 views

USN-5294-2: Linux kernel vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that the Packet network protocol implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or...

7.8CVSS8AI score0.13534EPSS
Exploits9Affected Software1
Debian
Debian
added 2022/03/09 12:40 p.m.60 views

[SECURITY] [DLA 2941-1] linux-4.19 security update

Debian LTS Advisory DLA-2941-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings March 09, 2022 https://wiki.debian.org/LTS Package : linux-4.19 Version : 4.19.232-1deb9u1 CVE ID : CVE-2020-29374 CVE-2020-36322 CVE-2021-3640 CVE-2021-3744 CVE-2021-3752 CVE-2021-3760...

9CVSS7.6AI score0.54322EPSS
Exploits40
Tenable Nessus
Tenable Nessus
added 2022/02/24 12:0 a.m.34 views

SUSE SLES12 Security Update : kernel (Live Patch 38 for SLE 12 SP3) (SUSE-SU-2022:0552-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0552-1 advisory. - A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way...

7CVSS6.7AI score0.0008EPSS
Exploits1References7
OpenVAS
OpenVAS
added 2022/02/23 12:0 a.m.39 views

Ubuntu: Security Advisory (USN-5298-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.13534EPSS
Exploits8References4
OpenVAS
OpenVAS
added 2022/02/23 12:0 a.m.25 views

Ubuntu: Security Advisory (USN-5297-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.13534EPSS
Exploits7References2
Veracode
Veracode
added 2022/02/22 5:34 p.m.36 views

Use-After-Free

A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem...

7CVSS4.5AI score0.0008EPSS
Exploits1References9Affected Software2
RedHat Linux
RedHat Linux
added 2022/02/22 5:2 p.m.2 views

kernel: double free in bluetooth subsystem when the HCI device initialization fails

A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system...

5.5CVSS6.7AI score0.00025EPSS
Exploits1References5
Ubuntu
Ubuntu
added 2022/02/22 7:52 a.m.147 views

USN-5294-2: Linux kernel vulnerabilities

It was discovered that the Packet network protocol implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-22600 Szymon Heidrich discovered that the USB Gadget...

7.8CVSS7.4AI score0.13534EPSS
Exploits9
OSV
OSV
added 2022/02/22 7:52 a.m.3 views

USN-5294-2 linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-azure-fde, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4 linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

It was discovered that the Packet network protocol implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-22600 Szymon Heidrich discovered that the USB Gadget...

7.8CVSS6.9AI score0.13534EPSS
Exploits9References9
Ubuntu
Ubuntu
added 2022/02/22 7:43 a.m.156 views

USN-5297-1: Linux kernel (GKE) vulnerabilities

Szymon Heidrich discovered that the USB Gadget subsystem in the Linux kernel did not properly restrict the size of control requests for certain gadget types, leading to possible out of bounds reads or writes. A local attacker could use this to cause a denial of service system crash or possibly...

7.8CVSS7.1AI score0.13534EPSS
Exploits7
Tenable Nessus
Tenable Nessus
added 2022/02/22 12:0 a.m.38 views

Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5298-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5298-1 advisory. It was discovered that the Packet network protocol implementation in the Linux kernel contained a double- free vulnerability. A local attacke...

7.8CVSS7.7AI score0.13534EPSS
Exploits8References13
Tenable Nessus
Tenable Nessus
added 2022/02/22 12:0 a.m.50 views

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel (GKE) vulnerabilities (USN-5297-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5297-1 advisory. Szymon Heidrich discovered that the USB Gadget subsystem in the Linux kernel did not properly restrict the size of control requests for certa...

7.8CVSS7.3AI score0.13534EPSS
Exploits7References8
Tenable Nessus
Tenable Nessus
added 2022/02/22 12:0 a.m.44 views

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5294-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5294-2 advisory. It was discovered that the Packet network protocol implementation in the Linux kernel contained a double- free vulnerability. A local attacke...

7.8CVSS7.2AI score0.13534EPSS
Exploits9References9
OSV
OSV
added 2022/02/18 12:35 a.m.2 views

USN-5294-1 linux vulnerabilities

It was discovered that the Packet network protocol implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-22600 Szymon Heidrich discovered that the USB Gadget...

7.8CVSS6.9AI score0.13534EPSS
Exploits9References9
OSV
OSV
added 2022/01/11 4:58 a.m.1 views

USN-5218-1 linux-oem-5.13 vulnerabilities

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. CVE-2021-4002 It was discovered that the eBPF implementation in the Linux...

9.8CVSS7.2AI score0.72624EPSS
Exploits5References10
RedhatCVE
RedhatCVE
added 2022/01/10 1:24 p.m.48 views

CVE-2021-4202

A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem...

7CVSS1.9AI score0.0008EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2022/01/01 12:0 a.m.3 views

PT-2025-8064

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel's Bluetooth handling has been identified, specifically in the hci sync function. The problem occurs when the HCI UNREGISTER flag is set, which indicates that...

7.8CVSS6.4AI score0.001EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2021/12/31 12:0 a.m.56 views

CVE-2021-4202

A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem...

7CVSS6.7AI score0.0008EPSS
Exploits1References9
OSV
OSV
added 2021/12/31 12:0 a.m.0 views

UBUNTU-CVE-2021-4202

A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem...

7CVSS6.6AI score0.0008EPSS
Exploits1References10
Rows per page
Query Builder