The vulnerability of the Linux operating system’s ION memory distribution subsystem allows attackers to enhance their privileges and affect the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s memory distribution subsystem, ION, is related to the use of previously freed memory due to insufficient synchronization. Exploiting this vulnerability can allow attackers to enhance their privileges and affect the confidentiality, integrity, and...

The vulnerability of the Btrfs file system in Linux kernels allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Btrfs file system in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

SUSE CVE-2004-0077

The domremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the domunmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different...

SUSE CVE-2005-0176

The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released...

SUSE CVE-2009-4112

Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - Get Memory Usage" setting to contain arbitrary commands...

Metasploit Weekly Wrap-Up

Have you built out that awesome media room? If your guilty pleasures include using a mobile device to make your home entertainment system WOW your guests, you might be using Unified Remote. I hope you are extra cautious about what devices you let on that WiFi network. A prolific community member...

The vulnerability of the Btrfs implementation in the Linux operating system is related to the allocation of unlimited memory, which allows a hacker to cause a service failure.

The vulnerability of the Btrfs implementation in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mmap() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the mmap function in Linux operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

libhevc:hevc_dec_fuzzer: Use-of-uninitialized-value in ihevcd_fmt_conv_420sp_to_rgb565

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5728697516032000 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzermsanlibhevc Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick/encoder_vda_fuzzer: Use-of-uninitialized-value in GetMagicInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6001481594437632 Project: imagemagick Fuzzer: libFuzzerimagemagickencodervdafuzzer Fuzz target binary: encodervdafuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Linux Memory Extractor: LiME

Linux Memory Extractor LiME formerly DMD is A Loadable Kernel Module LKM which allows for volatile memory acquisition from Linux and Linux-based devices, such as Android. This makes LiME unique as it is the first tool that allows for full memory captures on Android devices. It also minimizes its...

kernel: memcg: OOM handling DoS

It was found that the Linux kernel memory resource controller's memcg handling of OOM out of memory conditions could lead to deadlocks. An attacker able to continuously spawn new processes within a single memory-constrained cgroup during an OOM event could use this flaw to lock up the system...

Linux Memory Scanner: scanmem

Linux Memory Scanner scanmem is a debugging utility designed to isolate the address of an arbitrary variable in an executing process. scanmem simply needs to be told the pid of the process, and the value of the variable at several different times. After several scans of the process, scanmem...

CVE-2005-0176

The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released...

CVE-2004-0491

The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit...

DSA-514 kernel-image-sparc-2.2 - failing function and TLB flush

Bulletin has no description...

netBSD_local_DoS.txt

Subject: Re: NetBSD 1.4.1 local DoS To: [email protected] This does not freeze' the system per se. What it does is tie up all the network resources, and make it impossible to any network I/O even through Unx-domain sockets. Linux is not generally vulnerable to the exploit as posted, becau...