kernel: Out-of-bounds write via userland offsets in ebt_entry struct in netfilter/ebtables.c

A flaw was found in the Linux kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory...

hw: cpu: speculative execution permission faults handling

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three primary variants of the issue which differ in the way the speculative execution can be exploited. Variant...

CVE-2018-6921

In FreeBSD before 11.1-STABLEr332066 and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of...

CVE-2018-6921

In FreeBSD before 11.1-STABLEr332066 and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of...

CVE-2018-6920

In FreeBSD before 11.1-STABLEr332303, 11.1-RELEASE-p10, 10.4-STABLEr332321, and 10.4-RELEASE-p9, due to insufficient initialization of memory copied to userland in the Linux subsystem and Atheros wireless driver, small amounts of kernel memory may be disclosed to userland processes. Unprivileged...

hw: cpu: speculative execution permission faults handling

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three primary variants of the issue which differ in the way the speculative execution can be exploited. Variant...

kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation

A bug in the 32-bit compatibility layer of the ioctl handling code of the v4l2 video driver in the Linux kernel has been found. A memory protection mechanism ensuring that user-provided buffers always point to a userspace memory were disabled, allowing destination address to be in a kernel space...

CVE-2018-6921

In FreeBSD before 11.1-STABLEr332066 and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of...

CVE-2018-6921

CVE-2018-6921 affects FreeBSD prior to 11.1-STABLE (r332066) and 11.1-RELEASE-p10, where memory copied to userland in the network subsystem was not initialized properly, allowing small amounts of privileged kernel data to be disclosed to unprivileged authenticated local users. Multiple downstream...

CVE-2018-6920

Removed by vendor...

FreeBSD-SA-18:06.debugreg

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-18:06.debugreg Security Advisory The FreeBSD Project Topic: Mishandling of x86 debug exceptions Category: core Module: kernel Announced: 2018-05-08 Credits: Nic...

CVE-2018-6921: Exposure of Sensitive Information to an Unauthorized Actor

In FreeBSD before 11.1-STABLEr332066 and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of...

PT-2018-17821

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.1-STABLEr332303 FreeBSD versions prior to 11.1-RELEASE-p10 FreeBSD versions prior to 10.4-STABLEr332321 FreeBSD versions prior to 10.4-RELEASE-p9 Description The issue is related to insufficient initialization of...

PT-2018-17822

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.1-STABLEr332066 and prior to 11.1-RELEASE-p10 Description The issue is related to insufficient initialization of memory in the network subsystem, which may disclose small amounts of kernel memory to userland...

CVE-2018-6920: Exposure of Sensitive Information to an Unauthorized Actor

In FreeBSD before 11.1-STABLEr332303, 11.1-RELEASE-p10, 10.4-STABLEr332321, and 10.4-RELEASE-p9, due to insufficient initialization of memory copied to userland in the Linux subsystem and Atheros wireless driver, small amounts of kernel memory may be disclosed to userland processes. Unprivileged...

FreeBSD -- Mishandling of x86 debug exceptions

Problem Description: The MOV SS and POP SS instructions inhibit debug exceptions until the instruction boundary following the next instruction. If that instruction is a system call or similar instruction that transfers control to the operating system, the debug exception will be handled in the...

PT-2018-10197

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.16.6 Description The issue is related to an incorrect bounds check in the CDROM driver CDROM MEDIA CHANGED ioctl, which allows local attackers to read out kernel memory. Recommendations For Linux kernel version...

PT-2018-2683

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.6 Description The issue is related to an information leak in the cdrom ioctl drive status function in the Linux kernel, which could allow local attackers to read kernel memory. This is due to a cast from...

CVE-2016-9038

An exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of Invincea-X 6.1.3-24058. A specially crafted input buffer and race condition can result in kernel memory corruption, which could result in privilege escalation. An attacker needs to execute a special...

Race condition

An exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of Invincea-X 6.1.3-24058. A specially crafted input buffer and race condition can result in kernel memory corruption, which could result in privilege escalation. An attacker needs to execute a special...