3 matches found
PT-2021-8243 Ā· LinuxĀ +2 Ā· Linux KernelĀ +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions 4.13 through 5.10 Description: The issue is related to a use-after-free in the nfs4 init client function. KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belo...
kernel: Possible heap buffer overflow in brcmf_cfg80211_mgmt_tx()
Kernel memory corruption due to a buffer overflow was found in brcmfcfg80211mgmttx function in Linux kernels from v3.9-rc1 to v4.13-rc1. The vulnerability can be triggered by sending a crafted NL80211CMDFRAME packet via netlink. This flaw is unlikely to be triggered remotely as certain userspace...
Playing with kernel TLS in Linux 4.13 and Go
Linux 4.13 introduces support for nothing less than... TLS! The 1600 LoC patch allows userspace to pass the kernel the encryption keys for an established connection, making encryption happen transparently inside the kernel. The only ciphersuite supported is AES-128-GCM as per RFC 5288, meaning it...