17614 matches found
kernel: tap: tap_open(): correctly initialize socket uid
A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and get unauthorized access to some resources...
kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid
A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits -...
kernel: Linux kernel CXL driver: Use-after-free vulnerability leading to system instability or privilege escalation
A flaw was found in the Linux kernel's CXL driver. This vulnerability, a use-after-free, allows a local user to cause system instability or a denial of service. The issue arises when the cxlparsecfmws function attempts to use memory that has already been released. This could potentially lead to...
kernel: RDMA/core: Make sure "ib_port" is valid when access sysfs node
A NULL pointer dereference flaw was found in the Linux kernel RDMA core's sysfs handling. A local user with access to InfiniBand sysfs nodes can read sysfs attributes while an InfiniBand port is being removed, causing the kernel to dereference a NULL ibport pointer when the port structure has bee...
kernel: kernel: Denial of Service due to xid leak in cifs_flock()
A flaw was found in the Linux kernel. This vulnerability, a resource leak, occurs in the CIFS Common Internet File System component within the cifsflock function. A local user could exploit this by not using flock, which prevents the transaction identifier xid from being freed, leading to a...
kernel: drm/i915/gvt: fix vgpu debugfs clean in remove
A NULL pointer dereference was found in the Linux kernel Intel i915 graphics driver's virtual GPU debugfs cleanup handling. A local user with privileges to unbind the i915 driver can trigger driver removal on systems with active virtual GPU instances, causing the cleanup path to attempt removing...
PT-2023-28542 · Arm · Arm 5Th Gen Gpu Architecture Kernel Driver +4
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory. Recommendations: At the moment, there is no information about...
Rocky Linux 8 : kernel-rt (RLSA-2023:0114)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0114 advisory. - A flaw was found in the Linux kernel's driver for the ASIX AX88179178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple...
Veeam Agent for Microsoft Windows 2.x < 4.0.2.2208 / 5.x < 5.0.3.4708 Privilege Escalation
The version of Veeam Agent for Microsoft Windows installed on the remote Windows host is affected by a privilege escalation vulnerability. Deserialization of untrusted data allows local users to run arbitrary code with local system privileges. Note that Nessus has not tested for this issue but ha...
CVE-2023-1476
A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system...
Amazon Linux 2 : kernel (ALAS-2023-2328)
The version of kernel installed on the remote host is prior to 4.14.327-246.539. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2328 advisory. 2024-07-03: CVE-2023-52574 was added to this advisory. 2024-06-06: CVE-2023-52567 was added to this advisory...
F5 Networks BIG-IP : RSRE Variant 3a vulnerability (K51801290)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K51801290 advisory. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may...
UBUNTU-CVE-2023-3397
A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attacker with normal user privileges to crash the system or leak internal kernel information...
CVE-2023-3972
A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been registered on the system by root, an unprivileged local...
Ubuntu 23.10 : Linux kernel (StarFive) vulnerabilities (USN-6454-4)
The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6454-4 advisory. Kyle Zeng discovered that the netfilter subsystem in the Linux kernel contained a race condition in IP set operations in certain situations. A local attacker...
SUSE SLES15 Security Update : kernel (Live Patch 3 for SLE 15 SP5) (SUSE-SU-2023:4325-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4325-1 advisory. - A use-after-free flaw was found in the Linux kernel's Netfilter functionality when adding a rule with NFTARULECHAINID. This flaw allows a loc...
SUSE SLES15 Security Update : kernel (Live Patch 1 for SLE 15 SP5) (SUSE-SU-2023:4308-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4308-1 advisory. - A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nftablesapi.c. Mishandled error handling...
SUSE SLES15 Security Update : kernel (Live Patch 16 for SLE 15 SP4) (SUSE-SU-2023:4301-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4301-1 advisory. This update for the Linux Kernel 5.14.21-1504002481 fixes several issues. The following security issues were fixed: - CVE-2023-4147: Fixed...
SUSE CVE-2015-0267
The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file...