CVE-2021-0627

In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722434; Issue ID: ALPS05722434...

GSD-2021-1001355 drm/sched: Avoid data corruptions

drm/sched: Avoid data corruptions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.133 by commit c32d0f0e164ffab2a56c7cf8e612584b4b740e2e. F...

GSD-2021-1001231 drm/sched: Avoid data corruptions

drm/sched: Avoid data corruptions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.3 by commit 50d7e03ad487cc45fc85164a299b945a41756ac0. Fo...

CVE-2020-5315

Dell EMC Repository Manager DRM version 3.2 contains a plain-text password storage vulnerability. Proxy server user password is stored in a plain text in a local database. A local authenticated malicious user with access to the local file system may use the exposed password to access the with...

CVE-2020-5315

Dell EMC Repository Manager (DRM) 3.2 contains a plain-text password storage vulnerability for proxy server credentials in the local database. An attacker with local file-system access and authentication could extract these passwords and gain the compromised user’s privileges. The issue is descri...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2021-2221)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

Google Android July 2021 Security Patch Vulnerabilities: Discover and Take Remote Response Action Using VMDR for Mobile Devices

The recently released Android Security Bulletin for July 2021 addresses 44 vulnerabilities, out of which 7 are rated as critical vulnerabilities. The vulnerabilities affect open-source components such as the Android Framework, Android Media Framework, and Android System. The vulnerabilities also...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-2051)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a...

GSD-2021-1001049 drm/tegra: sor: Do not leak runtime PM reference

drm/tegra: sor: Do not leak runtime PM reference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.12 by commit...

GSD-2021-1000970 drm/tegra: sor: Do not leak runtime PM reference

drm/tegra: sor: Do not leak runtime PM reference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.45 by commit...

UVI-2021-1000910 drm/tegra: sor: Do not leak runtime PM reference

drm/tegra: sor: Do not leak runtime PM reference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.127 by commit...

GSD-2021-1000910 drm/tegra: sor: Do not leak runtime PM reference

drm/tegra: sor: Do not leak runtime PM reference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.127 by commit...

UVI-2021-1000892 drm: Fix use-after-free read in drm_getunique()

drm: Fix use-after-free read in drmgetunique This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...

GSD-2021-1000872 drm: Fix use-after-free read in drm_getunique()

drm: Fix use-after-free read in drmgetunique This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.195 by commit...

GSD-2021-1000855 drm: Fix use-after-free read in drm_getunique()

drm: Fix use-after-free read in drmgetunique This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.237 by commit...

UVI-2021-1000855 drm: Fix use-after-free read in drm_getunique()

drm: Fix use-after-free read in drmgetunique This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.237 by commit...

GSD-2021-1000842 drm: Lock pointer access in drm_master_release()

drm: Lock pointer access in drmmasterrelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.273 by commit...

The vulnerability of the drm_syncobj_handle_to_fd function (drm_syncobj.c) in the Android operating system’s kernel allows a intruder to gain unauthorized access to protected information.

The vulnerability of the drmsyncobjhandletofd function in the Android operating system’s kernel is related to the disclosure of information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2021-0508

In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9...

kernel security and bug fix update

3.10.0-1160.31.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 vmmm after calling handleuserfault Phili...