2662 matches found
PT-2021-7677 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an out-of-bounds read flaw in the Linux kernel's io uring module. This flaw can be triggered by a user calling the io read function with specific parameters,...
PUB-A-190877100
In ioaddbuffers of iouring.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
GSD-2021-1001167 io_uring: fix memleak in io_init_wq_offload()
iouring: fix memleak in ioinitwqoffload This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...
UVI-2021-1001167 io_uring: fix memleak in io_init_wq_offload()
iouring: fix memleak in ioinitwqoffload This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...
UVI-2021-1000805 io_uring: fix ltout double free on completion race
iouring: fix ltout double free on completion race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...
GSD-2021-1000805 io_uring: fix ltout double free on completion race
iouring: fix ltout double free on completion race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...
GSD-2021-1000804 io_uring: fix link timeout refs
iouring: fix link timeout refs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit 876808dba2ff7509bdd7f230c4f374a0caf4f410, it w...
GSD-2021-1000770 io_uring: fix link timeout refs
iouring: fix link timeout refs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.43 by commit 0b2a990e5d2f76d020cb840c456e6ec5f0c27530, it w...
UVI-2021-1000770 io_uring: fix link timeout refs
iouring: fix link timeout refs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.43 by commit 0b2a990e5d2f76d020cb840c456e6ec5f0c27530, it w...
PT-2021-29270
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.10 Description The issue is related to a double free on completion race in io uring, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been prove...
PT-2021-25275
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.12.9 Description: The issue is related to io uring in the Linux Kernel. It was introduced in version v5.12 and fixed in version v5.12.10. The actual impact and attack plausibility have not yet been prove...
PT-2021-25276
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.10 Description: The issue is related to a double free on completion race in io uring. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
Unbreakable Enterprise kernel security update
5.4.17-2102.202.5 - sctp: delay autoasconf init until binding the first addr Xin Long Orabug: 32907967 CVE-2021-23133 CVE-2021-23133 - dm ioctl: fix out of bounds array access when no devices Mikulas Patocka Orabug: 32860491 CVE-2021-31916 - uek-rpm: update kABI lists for the new symbols Saeed...
DEBIAN-CVE-2020-36387
An issue was discovered in the Linux kernel before 5.8.2. fs/iouring.c has a use-after-free related to ioasynctaskfunc and ctx reference holding, aka CID-6d816e088c35...
UBUNTU-CVE-2020-36387
An issue was discovered in the Linux kernel before 5.8.2. fs/iouring.c has a use-after-free related to ioasynctaskfunc and ctx reference holding, aka CID-6d816e088c35...
CVE-2020-36387
An issue was discovered in the Linux kernel before 5.8.2. fs/iouring.c has a use-after-free related to ioasynctaskfunc and ctx reference holding, aka CID-6d816e088c35...
Linux kernel 资源管理错误漏洞
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in fs/iouring.c in Linux kernel versions prior to 5.8.2. An attacker could...
CVE-2021-3491
The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...
CVE-2021-3491
The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...
DEBIAN-CVE-2021-3491
The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...