Netflix Can Cut Off Moochers Without a Password-Sharing Crackdown

There's a simple way to limit Netflix freeloaders—give users the ability to easily boot unknown devices linked to their accounts...

A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed leading to a privilege escalation problem.

...

AZL-9237 CVE-2021-4202 affecting package kernel for versions less than 5.15.37.1-2

A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem...

CVE-2022-0646

A flaw use after free in the Linux kernel Management Component Transport Protocol MCTP subsystem was found in the way user triggers cancelworksync after the unregisternetdev during removing device. A local user could use this flaw to crash the system or escalate their privileges on the system. It...

UBUNTU-CVE-2022-0646

A flaw use after free in the Linux kernel Management Component Transport Protocol MCTP subsystem was found in the way user triggers cancelworksync after the unregisternetdev during removing device. A local user could use this flaw to crash the system or escalate their privileges on the system. It...

PT-2021-7254 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the nci request function in net/nfc/nci/core.c of the NFC Controller Interface NCI in the Linux kernel. This issue is related to the use of memory...

DEBIAN-CVE-2020-27820

A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could happen if removing device that is not common to remove video card physically without power-off, but same happens if "unbind" the driver...

UBUNTU-CVE-2020-27820

A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could happen if removing device that is not common to remove video card physically without power-off, but same happens if "unbind" the driver...

USN-5117-1 linux-oem-5.13 vulnerabilities

It was discovered that the btrfs file system in the Linux kernel did not properly handle removing a non-existent device id. An attacker with CAPSYSADMIN could use this to cause a denial of service. CVE-2021-3739 It was discovered that the Qualcomm IPC Router protocol implementation in the Linux...

USN-5115-1: Linux kernel (OEM) vulnerabilities

It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to expose sensitive information WiFi network traffic. CVE-2020-3702 Ofek Kirzner, Adam Morrison, Benedict Schlueter, and Piotr Krysiuk discovered that the BPF...

CVE-2021-38204

drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service use-after-free and panic by removing a MAX-3421 USB device in certain situations...

UBUNTU-CVE-2021-38204

drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service use-after-free and panic by removing a MAX-3421 USB device in certain situations...

PT-2021-1516 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.6 Description: The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the drivers/usb/host/max3421-hcd.c component. This vulnerability can be exploited by physically...

GSD-2021-1000580 net/smc: remove device from smcd_dev_list after failed device_add()

net/smc: remove device from smcddevlist after failed deviceadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

UVI-2021-1000536 net/smc: remove device from smcd_dev_list after failed device_add()

net/smc: remove device from smcddevlist after failed deviceadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

PT-2021-28520

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.3 Description The issue concerns a double free of blk mq tag set in device removal after a table load fails. This problem was introduced in version v4.6 and is fixed in version v5.12.3. The actual impact an...

PT-2021-24526

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: The issue concerns a double free of blk mq tag set in device removal after table load fails. This problem was introduced in version v4.6 and is fixed in Linux Kernel version v5.12.3. The...

PT-2021-24604

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue concerns a double free of blk mq tag set in device removal after a table load fails. This problem was introduced in version v4.6 and is fixed in version v5.10.36. The actual impact...

PT-2021-24567

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.11.20 Description: The issue concerns a double free of blk mq tag set in device removal after a table load fails. This problem was introduced in version v4.6 and is fixed in version v5.11.20. The actual impac...

PT-2021-6103 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free vulnerability in the postclose handler of the Linux kernel's nouveau driver. This vulnerability can occur when a device is removed, which can...