2670 matches found
USN-5793-1: Linux kernel vulnerabilities
It was discovered that the iouring subsystem in the Linux kernel did not properly perform reference counting in some situations, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-3910 ...
CVE-2022-47946
An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in iosqpollwaitsq in fs/iouring.c allows an attacker to crash the kernel, resulting in denial of service. finishwait can be skipped. An attack can occur in some situations by forking a process and then quickly...
CVE-2022-47946
An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in iosqpollwaitsq in fs/iouring.c allows an attacker to crash the kernel, resulting in denial of service. finishwait can be skipped. An attack can occur in some situations by forking a process and then quickly...
Linux kernel 资源管理错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a use-after-release in iosqpollwaitsq in fs/iouring.c that allows an attacker to crash the kernel,...
CVE-2022-47946
An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in iosqpollwaitsq in fs/iouring.c allows an attacker to crash the kernel, resulting in denial of service. finishwait can be skipped. An attack can occur in some situations by forking a process and then quickly...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2022-2602-Kernel-Exploit Details https://blog.hacktives...
ROS-20221220-01
A vulnerability in the ath9khtcwaitfortarget function of the Atheros wireless adapter driver of the kernel of the operating system Linux kernel is associated with a post-release usage error. Exploitation of the vulnerability could allow an attacker to access kernel memory by typing a specially...
Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-024 (ALASKERNEL-5.10-2022-024)
The version of kernel installed on the remote host is prior to 5.10.157-139.675. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-024 advisory. A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive reque...
GSD-2022-1007760 io_uring: calculate CQEs from the user visible value
iouring: calculate CQEs from the user visible value This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...
GSD-2022-1007712 io_uring: fix multishot accept request leaks
iouring: fix multishot accept request leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...
PT-2022-35967 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to a potential security vulnerability in the io uring subsystem, specifically with multishot accept request leaks. The actual impact and attack plausibility have not yet...
Amazon Linux 2 : kernel, --advisory ALAS2-2022-1888 (ALAS-2022-1888)
The version of kernel installed on the remote host is prior to 4.14.299-223.520. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1888 advisory. In v4l2m2mquerybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. Th...
CVE-2022-20153
A use-after-free flaw was found in the Linux kernel’s iouring in fs/iouring.c when improper locking happens. This flaw allows a local user to crash or potentially escalate their privileges on the system. Mitigation Mitigation for this issue is either not available or the currently available optio...
Ubuntu 22.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5752-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5752-1 advisory. David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the iouring subsystem in the Linux kernel, leading to a use- after-fr...
USN-5752-1 linux-azure-fde vulnerabilities
David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the iouring subsystem in the Linux kernel, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-2602...
Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2022-333-01)
The version of kernel-generic installed on the remote host is prior to 5.15.80 / 5.15.80smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-333-01 advisory. New kernel packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the...
PT-2022-6197 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A use-after-free flaw was found in the io uring subcomponent of the Linux Kernel due to a race condition in the poll refs function. This issue may cause a NULL pointer dereference,...
Use after free in io_uring in the Linux Kernel
...
CVE-2022-3910
Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in iouring leads to Use-After-Free and Local Privilege Escalation. When iomsgring was invoked with a fixed file, it called iofputfile which improperly decreased its reference count...
AZL-11460 CVE-2022-3910 affecting package kernel for versions less than 5.15.82.1-1
Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in iouring leads to Use-After-Free and Local Privilege Escalation. When iomsgring was invoked with a fixed file, it called iofputfile which improperly decreased its reference count...