PT-2017-1926

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.9.x through 4.10.1 Description The issue is caused by incorrect interaction with the CONFIG VMAP STACK option in the drivers/net/can/usb/gs usb.c file, allowing local users to cause a denial of service, such as a system...

PT-2017-1923

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.9.x through 4.9.10 Description The issue is caused by incorrect interaction with the CONFIG VMAP STACK option in the drivers/net/usb/rtl8150.c driver, allowing local users to cause a denial of service, such as a system...

PT-2017-1922

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.11 Description The issue is caused by a buffer overflow in the Linux kernel's drivers/net/usb/catc.c driver. It allows a local attacker to cause a denial of service, such as a system crash or memory corruptio...

PT-2017-1924

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.11 Description The issue is caused by a buffer overflow in the Linux kernel's drivers/net/usb/pegasus.c driver. It can be exploited by a local attacker who interacts incorrectly with the CONFIG VMAP STACK...

PT-2017-1182

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.9.x before 4.9.6 Description The issue is related to resource management errors in the drivers/net/ieee802154/atusb.c component of the Linux operating system. It can be exploited by a local attacker to cause a denial of...

CVE-2016-5342: Out-of-bounds Write

Heap-based buffer overflow in the wcnsswlanwrite function in drivers/net/wireless/wcnss/wcnsswlan.c in the wcnsswlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of...

CVE-2016-4805

Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and system crash, or spinlock or possibly have unspecified other impact by removing a network namespace, related to the...

CVE-2016-4805

Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and system crash, or spinlock or possibly have unspecified other impact by removing a network namespace, related to the...

CVE-2016-4805: Use After Free

Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and system crash, or spinlock or possibly have unspecified other impact by removing a network namespace, related to the...

CVE-2016-3951

Double free vulnerability in drivers/net/usb/cdcncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service system crash or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor...

CVE-2016-3951

CVE-2016-3951 concerns a double-free in Linux kernel drivers/net/usb/cdc_ncm.c, exploitable when a USB device with an invalid descriptor is inserted. Affected: Linux kernel pre-4.5; impact: denial of service (system crash) and potential unspecified effects. The linked Unity security advisories co...

CVE-2016-3951

Double free vulnerability in drivers/net/usb/cdcncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service system crash or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor...

CVE-2016-3951

Double free vulnerability in drivers/net/usb/cdcncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service system crash or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor...

PT-2016-5776

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description A double free vulnerability in the Linux kernel allows physically proximate attackers to cause a denial of service, potentially leading to a system crash, by inserting a USB device with an invalid...

PT-2019-7702

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description A use-after-free issue is caused by a race condition between the functions arc emac tx and arc emac tx clean in the Linux kernel. This issue is related to the emac main.c file in the...

Security update for the Linux Kernel (important)

The Linux kernel for openSUSE Leap 42.1 was updated to the 4.1.15 stable release, and also includes security and bugfixes. Following security bugs were fixed: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc96207...

CVE-2015-7799: Undefined Security Weakness

The slhcinit function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted PPPIOCSMAXCID ioctl call...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-55 - freezer: set PFSUSPENDTASK flag on tasks that call freezeprocesses Colin Cross Orabug: 20082843 3.8.13-54 - netfilter: nfnat: fix oops on netns removal Florian Westphal Orabug: 19988779 - tcp: tsq: restore minimal amount of queueing Eric Dumazet Orabug: 19909542 - qedf: Fix...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3043)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3043 advisory. - fix autofs/afs/etc. magic mountpoint breakage Al Viro Orabug: 19028505 CVE-2014-0203 - SELinux: Fix kernel BUG on empty security contexts. Stephe...

Design/Logic Flaw

The yamioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAPNETADMIN capability for an SIOCYAMGCFG ioctl call...