PT-2022-36480 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: drbd versions prior to v4.19.267 linux kernel versions 3.15 through 4.19.266 Description: A use after free issue exists in the drbd create device function. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-29901

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.16.18 Description A memory leak issue was discovered in the Linux Kernel. The issue occurs during registration failure in cscfg create device. The actual impact and attack plausibility have not yet been...

PT-2022-29594

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.17.1 Description A memory leak issue was discovered in the Linux Kernel. The issue occurs during registration failure in cscfg create device. The actual impact and attack plausibility have not yet been...

PT-2022-30208

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.32 Description A memory leak issue was discovered in the Linux Kernel. The issue occurs during registration failure in cscfg create device. The actual impact and attack plausibility have not yet been...

Kernel: KVM: potential use-after-free via kvm_ioctl_create_device()

A use-after-free vulnerability was found in the way the Linux kernel's KVM hypervisor implements its device control API. While creating a device via kvmioctlcreatedevice, the device holds a reference to a VM object, later this reference is transferred to the caller's file descriptor table. If suc...

Kernel: KVM: potential use-after-free via kvm_ioctl_create_device()

A use-after-free vulnerability was found in the way the Linux kernel's KVM hypervisor implements its device control API. While creating a device via kvmioctlcreatedevice, the device holds a reference to a VM object, later this reference is transferred to the caller's file descriptor table. If suc...

DEBIAN-CVE-2019-6974

In the Linux kernel before 4.20.8, kvmioctlcreatedevice in virt/kvm/kvmmain.c mishandles reference counting because of a race condition, leading to a use-after-free...

UBUNTU-CVE-2019-6974

In the Linux kernel before 4.20.8, kvmioctlcreatedevice in virt/kvm/kvmmain.c mishandles reference counting because of a race condition, leading to a use-after-free...

PT-2019-1721

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.20.8 Description The issue is caused by a race condition in the kvm ioctl create device function, leading to a use-after-free error. This can be exploited by a remote attacker to cause a denial of service. The...

UBUNTU-CVE-2018-10923

It was found that the "mknod" call derived from mknod2 can create files pointing to devices on a glusterfs server node. An authenticated attacker could use this to create an arbitrary device and read data from any device attached to the glusterfs server node...

CVE-2018-7205

Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote attackers to execute malicious JavaScript via a malicious devicename parameter in a link that is entered via the "Pages - Edit template properties - Device Layouts - Create devic...