PT-2021-27222

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.15.10 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. The actual impact and attack plausibility have not yet been proven...

PT-2021-27082

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.296 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. It was introduced in version v3.16 and fixed in version v4.4.296. The actual...

PT-2021-27125

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 4.19.221 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. It was introduced in version v3.16 and fixed in version v4.19.222. The actu...

PT-2021-27143

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.4.167 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. It was introduced in version v3.16 and fixed in version v5.4.168. The actual...

PT-2021-27174

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.10.87 Description The issue concerns the addition of global locking for descriptor lifecycle in the systemport of the net module. It was introduced in version v3.16 and fixed in version v5.10.88. The actual...

PT-2021-8129 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the dbgfs component of the Linux kernel and is caused by incorrect locking. This can lead to a use after free bug when the monitoring targets are destroyed...

PT-2021-8075 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the use of the get user pages unlocked call to handle mmap assert in the nitro enclaves component of the Linux kernel. After a specific commit, the call...

PT-2021-8126 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to incorrect locking of resources in the mac80211 component of the Linux kernel. This could allow an attacker to cause a denial of service. The problem is...

It might not be possible to withdraw tokens from the basket

Handle Czar102 Vulnerability details Impact When enough basket token owners exit, it will be impossible to exit pool with the last MINAMOUNT tokens because of this check. This will result in locking some tokens forever. Recommended Mitigation Steps Consider resigning from this check or performing...

PT-2021-26994

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.6 Description The issue concerns a problem with link traversal locking in io uring. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

CVE-2021-39656

In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39656

In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39640

In dwc3gadgetep0queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

DEBIAN-CVE-2021-39656

In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39656

In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39647

In monsmcloadsp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smcbooting.S, there is a possible reinitialization of TEE due to improper locking. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-39640

In dwc3gadgetep0queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

Out-of-bounds

In dwc3gadgetep0queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39656

In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

Design/Logic Flaw

In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...