2662 matches found
Heap overflow
The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...
CVE-2021-3491
The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...
CVE-2021-3491 Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass
The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...
CVE-2021-3491
The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...
CVE-2021-3491
CVE-2021-3491 concerns the Linux kernel io_uring PROVIDE_BUFFERS path, where the MAX_RW_COUNT limit could be bypassed, causing negative values to be used in mem_rw during /proc//mem reads. This could enable a heap overflow and potential arbitrary code execution in the kernel. The issue was addres...
CVE-2021-3491
The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...
CVE-2021-3491: Incorrect Calculation of Buffer Size
The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc/ /mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...
GSD-2021-1000368 io_uring: fix overflows checks in provide buffers
iouring: fix overflows checks in provide buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...
GSD-2021-1000265 io_uring: fix overflows checks in provide buffers
iouring: fix overflows checks in provide buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
UVI-2021-1000265 io_uring: fix overflows checks in provide buffers
iouring: fix overflows checks in provide buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
UVI-2021-1000368 io_uring: fix overflows checks in provide buffers
iouring: fix overflows checks in provide buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...
GSD-2021-1000057 io_uring: fix shared sqpoll cancellation hangs
iouring: fix shared sqpoll cancellation hangs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...
UVI-2021-1000057 io_uring: fix shared sqpoll cancellation hangs
iouring: fix shared sqpoll cancellation hangs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...
PT-2021-24839
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue concerns overflows checks in provide buffers, specifically related to io uring. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...
PT-2021-28833
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue concerns overflows checks in provide buffers, specifically related to io uring. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-24736
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.12.3 Description The issue concerns overflows checks in provide buffers, specifically related to io uring. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2021-28730
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.12.3 Description The issue concerns overflows checks in provide buffers, specifically related to io uring. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2021-28524
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.2 Description The issue is related to a problem with shared sqpoll cancellation hangs in io uring. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.12...
Linux io_uring Data Compromise
The vulnerability of the asynchronous input/output interface iouring in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
MGASA-2021-0214 Updated kernel packages fix security vulnerabilities
This kernel update is based on upstream 5.10.37 and fixes at least the following security issues: It was discovered that the iouring implementation of the Linux kernel did not properly enforce the MAXRWCOUNT limit in some situations. A local attacker could use this to cause a denial of service...