GSD-2021-1002059 cfg80211: fix management registrations locking

cfg80211: fix management registrations locking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.77 by commit...

PT-2021-30627

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description The issue concerns a locking problem for Tx timestamp tracking flush. It was introduced in version v5.15 and fixed in the same version by a specific commit. The actual impact and attack...

PT-2021-30524

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.77 Description The issue is related to the cfg80211 management registrations locking in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30558

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14.4 through v5.14.14 Description The issue concerns a locking problem for Tx timestamp tracking flush. It was introduced in version v5.14.4 and fixed in version v5.14.14. The actual impact and attack plausibility have...

PT-2021-30587

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to a locking problem in management registrations in the cfg80211 module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26529

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.77 Description The issue concerns a locking problem in management registrations within the cfg80211 component. It was introduced in version v5.8 and fixed in version v5.10.77. The actual impact and attack...

PT-2021-26563

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.14.4 through 5.14.13 Description The issue concerns a locking problem for Tx timestamp tracking flush. It was introduced in version 5.14.4 and fixed in version 5.14.14. The actual impact and attack plausibility have not...

PT-2021-26592

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to a locking problem in management registrations in the cfg80211 module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26632

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue concerns a locking problem for Tx timestamp tracking flush. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-30656

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15 Description The issue is related to the cfg80211 management registrations locking in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-26661

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.15 Description: The issue is related to the cfg80211 management registrations locking in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

RHEL 8 : kernel-rt (RHSA-2021:4140)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4140 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Unchecked low level calls

Handle Reigada Vulnerability details Impact The return value of these low-level calls are not checked, so if the call fails, the Ether will be locked in the contract. Setting the risk as medium as the smart contract has no function to withdraw the Ether. This Ether would remain stuck in the...

libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited...

kernel: locking inconsistency in drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c can lead to a read-after-free

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel. A local user could use this flaw to read numerical value from memory after free...

kernel: locking inconsistency in drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c can lead to a read-after-free

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel. A local user could use this flaw to read numerical value from memory after free...

WordPress Secure Copy Content Protection and Content Locking plugin <= 2.8.1 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by Krzysztof Zając in WordPress Secure Copy Content Protection and Content Locking plugin versions = 2.8.1. Solution Update the WordPress Secure Copy Content Protection and Content Locking plugin to the latest available version at least...

Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection

The plugin does not escape the sccpid parameter of the ayssccpresultsexportfile AJAX action available to both unauthenticated and authenticated users before using it in a SQL statement, leading to an SQL injection. PoC...

Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection

The plugin does not escape the sccpid parameter of the ayssccpresultsexportfile AJAX action available to both unauthenticated and authenticated users before using it in a SQL statement, leading to an SQL injection...

PT-2021-16373

Name of the Vulnerable Software and Affected Versions: Secure Copy Content Protection and Content Locking WordPress plugin versions prior to 2.8.2 Description: The issue arises from the failure to escape the sccp id parameter of the "ays sccp results export file" AJAX action, leading to an SQL...