4265 matches found
DEBIAN-CVE-2021-4037
A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...
UBUNTU-CVE-2021-4037
A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...
UBUNTU-CVE-2022-2978
A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function securityinodealloc to fail with following call to function nilfsmdtdestroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system...
CVE-2021-4037
A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...
CVE-2021-4037
A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...
PT-2024-11771
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to temporary data corruption in the collapse range of the smb3 module. The collapse range does not discard the affected cached region, which can risk temporarily...
PT-2024-11770
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns temporary data corruption in the insert range of the smb3 module. The insert range does not discard the affected cached region, which can risk temporarily corrupting...
PT-2022-7112
Name of the Vulnerable Software and Affected Versions Linux kernel NILFS file system affected versions not specified Description The issue is related to a use after free flaw in the Linux kernel NILFS file system. This flaw can be triggered when a user causes the security inode alloc function to...
bpftool, kernel, perf, python security update
CentOS Errata and Security Advisory CESA-2022:5937 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Moderate: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
GSD-2022-1004288 netfs: Fix gcc-12 warning by embedding vfs inode in netfs_i_context
netfs: Fix gcc-12 warning by embedding vfs inode in netfsicontext This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...
CVE-2022-22215
A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module PAM of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. It is possible that after the...
CVE-2022-22215
A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module PAM of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. It is possible that after the...
Design/Logic Flaw
A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module PAM of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. It is possible that after the...
CVE-2022-22215 Junos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion
A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module PAM of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. It is possible that after the...
CVE-2022-22215: Missing Release of Resource after Effective Lifetime
A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module PAM of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. It is possible that after the...
PT-2022-37696
Уязвимость функции parsec inode getsecid модуля ядра linux-astra-modules связана с некорректным освобождением памяти после завершения её использования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
CVE-2022-22215
A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module PAM of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. It is possible that after the...
PT-2022-6105
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 19.1R3-S8 Juniper Networks Junos OS versions 19.2 prior to 19.2R3-S6 Juniper Networks Junos OS versions 19.3 prior to 19.3R3-S5 Juniper Networks Junos OS versions 19.4 prior to 19.4R2-S6, 19.4R3-S7...
XFS Heap Buffer Overflow DoS
The vulnerability in the fs/xfs/libxfs/xfs inodebuf.c file of the XFS file system in Linux operating systems is related to writing beyond the buffer’s boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...