CVE-2022-21816

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where a user in the guest OS can cause a GPU interrupt storm on the hypervisor host, leading to a denial of service...

cryptsetup security update

An update for cryptsetup is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2022-0322

A flaw was found in the sctpmakestrresetreq function in net/sctp/smmakechunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUGON issue, leading to a denial of service DOS. Mitigation...

[SECURITY] Fedora 35 Update: cryptsetup-2.4.3-1.fc35

The cryptsetup package contains a utility for setting up disk encryption using dm-crypt kernel module...

PT-2025-37618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak within the orangefs sysfs init function when the orangefs module is inserted and removed. This results in unreferenced kobjects leaking memory. Th...

CVE-2021-45608

CVE-2021-45608 is a buffer/integer overflow in KCodes NetUSB kernel module (SoftwareBus_dispatchNormalEPMsgOut) affecting D-Link, Edimax, NETGEAR, TP-Link, Tenda and Western Digital devices. Affected NETGEAR models include D7800 (before 1.0.1.68), R6400v2 (before 1.0.4.122), and R6700v3 (before 1...

CVE-2021-45608

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Remote code execution from the WAN interface TCP port 20005 cannot be ruled out; however, exploitability was judged to be of "rather significant...

CVE-2021-44733

A use-after-free flaw in the Linux kernel TEE Trusted Execution Environment subsystem was found in the way user calls ioctl TEEIOCOPENSESSION or TEEIOCINVOKE. A local user could use this flaw to crash the system or escalate their privileges on the system. If the Linux system non configured with t...

Huawei HarmonyOS Stack Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS. An attacker can exploit the vulnerability to cause an out-of-bounds re...

Huawei HarmonyOS Stack Buffer Overflow Vulnerability (CNVD-2021-99967)

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attack...

Huawei HarmonyOS Stack Buffer Overflow Vulnerability (CNVD-2021-99966)

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attack...

Huawei HarmonyOS stack buffer overflow vulnerability (CNVD-2021-99968)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS. An attacker can exploit this vulnerability to cause the device to beco...

Security Bulletin: Publicly disclosed vulnerabilities from Kernel affect IBM Netezza Host Management

Summary Kernel is used by IBM Netezza Host Management. This bulletin provides mitigation for the reported CVEs. Vulnerability Details CVEID: CVE-2021-3772 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by improper validation of integrity check value by the Linux SCTP stack...

CVE-2021-43975

An out-of-bounds write flaw was found in the Linux kernel’s Aquantia AQtion Ethernet card Atlantic driver in the way the ethernet card provides malicious input to the driver. This flaw allows a local user to emulate the networking device and crash the system. The highest threat from this...

CVE-2021-43389

An improper validation of an array index and out of bounds memory read in the Linux kernel's Integrated Services Digital Network ISDN functionality was found in the way users call ioctl CMTPCONNADD. A local user could use this flaw to crash the system or starve the resources causing denial of...

CVE-2021-42739

A heap-based buffer overflow flaw was found in the Linux kernel FireDTV media card driver, where the user calls the CASENDMSG ioctl. This flaw allows a local user of the host machine to crash the system or escalate privileges on the system. The highest threat from this vulnerability is to...

Exploit for Use After Free in Microsoft

CVE-2021-40449 My exploit for CVE-2021-40449, a Windows LPE vi...

CVE-2021-3896

An improper validation of an array index and out of bounds memory read in the Linux kernel's Integrated Services Digital Network ISDN functionality was found in the way users call ioctl CMTPCONNADD. A local user could use this flaw to crash the system or starve the resources causing denial of...

The vulnerability in the `drivers/gpu/drm/nouveau/nouveau_sgdma.c` kernel module of the Linux operating system arises from the use of memory after it is freed. This allows an attacker to execute arbitrary code with root privileges.

The vulnerability in the drivers/gpu/drm/nouveau/nouveausgdma.c kernel module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

CVE-2021-3715

A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading to a use-after-free condition. This flaw allows unprivileged local users to escalate their privileges on the system. T...