Linux kernel Heap Buffer Overflow DoS

The vulnerability of the iucvsockdestruct function in the net/iucv/afiucv.c component of the Linux kernel is related to improper memory release before deleting the last pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/iucv: Fixed the issue where iucvsockclose was used after memory was freed. The iucvseverpath function is called from both process context and thread context. The iucv-path variable is used to indicate whether someone else ...

AZL-47853 CVE-2024-42271 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use after free in iucvsockclose iucvseverpath is called from process context and from bh context. iucv-path is used as indicator whether somebody else is taking care of severing the path or it is already removed /...

DEBIAN-CVE-2024-42271

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use after free in iucvsockclose iucvseverpath is called from process context and from bh context. iucv-path is used as indicator whether somebody else is taking care of severing the path or it is already removed /...

PT-2024-7200

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The vulnerability is related to a use-after-free issue in the iucv sock close function. The iucv sever path function is called from both process context and bh context, and iucv-path is used as...

SUSE CVE-2013-3229

The iucvsockrecvmsg function in net/iucv/afiucv.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

DEBIAN-CVE-2013-3229

The iucvsockrecvmsg function in net/iucv/afiucv.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

PT-2013-1109

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue concerns multiple vulnerabilities in the Linux operating system, specifically in the Debian GNU/Linux package, which can be exploited by a local attacker to compromise the...