Arbitrary Code Execution

kernel-rt is vulnerable to arbitrary code execution. The vulnerability exists as it uses incorrect uid and gid values during credentials passing in the scmsetcred function...

Information Disclosure

kernel-rt is vulnerable to information disclosure. The vulnerability exists as the cryptoreportone function in crypto/cryptouser.c users an incorrect length value during a copy operation...

Arbitrary Code Execution

kernel-rt is vulnerable to arbitrary code execution. The vulnerability exists through a format string attack in the input of printk...

Information Disclosure

kernel-rt is vulnerable to information disclosure. The vulnerability exists as the report API in the crypto user configuration API uses an incorrect C library function for copying strings...

Information Disclosure

kernel-rt is vulnerable to information disclosure. The vulnerability exists as the cryptoreportone function does not initialize certain structure members...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS. The vulnerability exists through a race condition in the installuserkeyrings function...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS. The vulnerability exists through the chaseport function...

Authorization Bypass

kernel-rt is vulnerable to authorization bypass. The vulnerability exists as it is possible to bypass the ASLR protection through a sigaction system call...

Arbitrary Code Execution

kernel-rt is vulnerable to arbitrary code execution. The vulnerability exists through a use-after-free vulnerability in the shmemremountfs function...

Privilege Escalation

kernel-rt is vulnerable to privilege escalation. An out-of-bounds access flaw was found in the way SOCKDIAGBYFAMILY Netlink messages were processed in the Linux kernel. A local, unprivileged user could use this flaw to escalate their privileges...

Authorization Bypass

kernel-rt is vulnerable to authorization bypass. A flaw was found in the way file permission checks for the /dev/cpu/x/msr files were performed in restricted root environments for example, when using a capability-based security model. A local user with the ability to write to these files could us...

Privilege Escalation

kernel-rt is vulnerable to privilege escalation. A buffer overflow flaw was found in the way UTF-8 characters were converted to UTF-16 in the utf8stoutf16s function of the Linux kernel's FAT file system implementation. A local user able to mount a FAT file system with the "utf8=1" option could us...

Information Disclosure

kernel-rt is vulnerable to information disclosure. A memory disclosure flaw was found in the way the loadscript function in the binfmtscript binary format handler handled excessive recursions. A local, unprivileged user could use this flaw to leak kernel stack memory to user-space by executing...

Privilege Escalation

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

Information Disclosure

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service. A flaw was found in the Linux kernel's Performance Events implementation. On systems with certain Intel processors, a local, unprivileged user could use this flaw to cause a denial of service by leveraging the perf subsystem to write into the reserved...

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...