AZL-6530 CVE-2021-23133 affecting package kernel for versions less than 5.10.78.1-1

A race condition in Linux kernel SCTP sockets net/sctp/socket.c before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctpdestroysock is called without socknetsk-sctp.addrwqlock then an element is removed from the...

PT-2021-28221

Name of the Vulnerable Software and Affected Versions: aom affected versions not specified Description: The issue is related to a heap-buffer-overflow read, which occurs when the aom codec destroy function is called. This leads to a crash in the av1 free cdef buffers and decoder destroy functions...

Linux Kernel Race Condition Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a Competitive Condition Issue vulnerability that stems from the sctpdestroysock function causing memory corruption, which triggers a denial of service...

PT-2021-4247

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12-rc8 Description A race condition in the Linux kernel's SCTP sockets can lead to kernel privilege escalation. This issue arises when sctp destroy sock is called without proper locking, allowing an element to ...

keystone:fuzz_asm_sparc64be: Invalid-free in llvm_ks::MCFragment::destroy

Project: https://github.com/keystone-engine/keystone.git Detailed Report: https://oss-fuzz.com/testcase?key=4678131216678912 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmsparc64be Job Type: libfuzzerasankeystone Platform Id: linux Crash Type: Invalid-free Crash Address:...

PT-2021-28042

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves functions such as cil destroy block, cil destroy data, and cil tr...

PT-2021-27505

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash type of Heap-double-free has been reported. The crash state involves the minimatch destroy function, ofctl parse flow, and ofctl parse target.c...

PT-2021-28061

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash involves the igraph vector ptr size, igraph gml tree destroy, and igraph i gml parsedata...

PT-2021-28033

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This specific err...

Qualcomm Qualcomm Graphics Resource Management Error Vulnerability

Qualcomm Graphics is a Qualcomm graphics support firmware for use on processors. A resource management error vulnerability exists in Qualcomm Graphics, which arises from a contention between the command commit and destroy contexts that results in invalid contexts being added to the list, and...

Fedora Resource Management Error Vulnerability

Fedora is a set of Linux operating systems from the Fedora community. A security vulnerability exists in Fedora c-ares, which can be exploited by an attacker to force the use of a freed memory region via c-ares' ares destroy to trigger a denial of service and potentially run code...

PT-2020-22129

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-double-free crash. The crash state involves the functions flb free, flb sds destroy, and flb kv item destroy. No information...

CVE-2020-6876: Improper Neutralization of Input During Web Page Generation

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...

PT-2020-22085

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash occurs in the flb parser decoder list destroy function, as indicated by the crash state. Th...

PT-2020-22070

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves functions such as destroy op array, fuzzer do request, and fuzzer...

kernel: use-after-free caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver

A use-after-free flaw was found in the acmprobe USB subsystem in the Linux kernel. A race condition occurs when a destroy procedure is initiated allowing the refcount to decrement on the interface so early that it is never under counted. A malicious USB device is required for exploit. System...

ALPINE-CVE-2020-25601

An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchnreset / evtchndestroy. In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these when resetting all event channels or when cleaning...

DEBIAN-CVE-2020-25601

An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchnreset / evtchndestroy. In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these when resetting all event channels or when cleaning...

UBUNTU-CVE-2020-25601

An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchnreset / evtchndestroy. In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these when resetting all event channels or when cleaning...

PT-2020-16118

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.14.x Description An issue in Xen allows malicious or buggy guest kernels to mount a Denial of Service DoS attack affecting the entire system. The problem arises from a lack of preemption in evtchn reset / evtchn destroy...