PT-2024-8330

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a kernel-infoleak vulnerability in the Linux kernel, specifically in the net/sched component. The vulnerability occurs because the tcf skbmod dump function copies...

CVE-2024-26805: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: netlink: Fix kernel-infoleak-after-free in skbdatagramiter syzbot reported the following uninit-value access issue 1: netlinktofullskb creates a new skb and puts the skb-data passed as a 1st arg of netlinktofullskb onto new skb...

PT-2022-36537 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.9 through 4.14.299 Description: The issue is related to an infoleak in the vmci host do receive datagram function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

UBUNTU-CVE-2022-42895

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2capcore.c's l2capparseconfreq function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e...

Unbreakable Enterprise kernel security update

4.1.12-124.67.3 - media: imon: Fix null-ptr-deref in imonprobe Arvind Yadav Orabug: 31225377 CVE-2017-16537 - fbcon: remove soft scrollback code Linus Torvalds Orabug: 31914703 CVE-2020-14390 - inet: use bigger hash table for IP ID generation Eric Dumazet Orabug: 33778986 CVE-2021-45486 - ipv4:...

GSD-2021-1002695 inet_diag: fix kernel-infoleak for UDP sockets

inetdiag: fix kernel-infoleak for UDP sockets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

PT-2021-27208

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to a kernel-infoleak for UDP sockets in the inet diag module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-27139

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description The issue concerns a kernel-infoleak for UDP sockets. It was introduced in version v3.3 and fixed in Linux Kernel version v5.4.168. The actual impact and attack plausibility have not yet been...

PT-2021-27163

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue concerns a kernel-infoleak for UDP sockets. It was introduced in version v3.3 and fixed in Linux Kernel version v5.10.88. The actual impact and attack plausibility have not yet been...

PT-2024-11498

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc3-syzkaller Description A kernel-infoleak vulnerability has been reported in the Linux kernel, specifically in the UDP sockets. This vulnerability can be exploited by unprivileged users. The issue arises...

[oss-security] CVE-2014-1739: Kernel Infoleak vulnerability in,media_enum_entities()

Hi, We found an infoleak vulnerability in the ioctl mediaenumentities that allows to disclose 200 bytes the kernel process' stack. The vulnerability is exploitable on versions up to linux-3.15-rc3 by local users with read access to /dev/media0. Linux distributions ship with chmod 600 /dev/media0...

kernel: socket filters infoleak

The skrunfilter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a 1 BPFSLDMEM or 2 BPFSLDXMEM instruction, which allows local users to obtain potentially sensitive information from kernel stac...