Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local...

Users will lose all of their money during pool migration

Lines of code Vulnerability details Impact Users will lose all of their money when they migrate by calling PoolMigrationZap.migrate Proof of Concept File: protocol/contracts/zaps/PoolMigrationZap.sol 1 52 function migrateaddress oldPoolAddress public override 53 ILiquidityPool oldPool =...

Users can grief reward distribution

Lines of code Vulnerability details Impact Users can grief reward distributions by spending dust Proof of Concept If a reward is targeted for an epoch in the past, a user can front-run the txn in the mempool and call addRewardToEpoch with a dust amount at an epoch after the one in question. This...

kernel: dm: fix mempool NULL pointer race when completing IO

A flaw was found in the Linux kernel's Device Mapper DM subsystem. This flaw allows a local user to cause a denial of service DoS by triggering a system crash. The issue occurs due to a race condition when an input/output I/O request completes concurrently with a table swap operation, resulting i...

kernel: dm: fix mempool NULL pointer race when completing IO

A flaw was found in the Linux kernel's Device Mapper DM subsystem. This flaw allows a local user to cause a denial of service DoS by triggering a system crash. The issue occurs due to a race condition when an input/output I/O request completes concurrently with a table swap operation, resulting i...

PT-2022-29298

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to NFS, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-29641

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue affects the NFS component, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-29967

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to NFS, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30256

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to NFS, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

CVE-2021-43429

A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempooldestroy method due to a failture to release locks pool-lock...

CVE-2021-43429

A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempooldestroy method due to a failture to release locks pool-lock...

PT-2022-11834

Name of the Vulnerable Software and Affected Versions CORTX-S3 Server affected versions not specified Description A Denial of Service issue exists due to a failure to release locks pool-lock via the mempool destroy method. Recommendations At the moment, there is no information about a newer versi...

setSherlockCoreAddress can be frontruned.

Handle wuwe1 Vulnerability details Proof of Concept SherDistributionManager.sol and AaveV2Strategy.sol are affected by this. For sdm, attacker can monitor mempool and frontrun the setSherlockCoreAddress . By setting the sherlockCore as a address controlled by attacker. Attacker can call pullRewar...

Slippage protection

Handle pauliax Vulnerability details Impact exchangeunderlying in functions swapUnderlyingToUst and swapUstToUnderlying lack slippage control, it uses a default value of 0 minimum received. A common attack in DeFi is the sandwich attack. Upon observing a trade of asset X for asset Y, an attacker...

GHSA-F854-HPXV-CW9R Drainage of FeeCollector's Block Transaction Fees in cronos

Impact In Cronos nodes running versions before v0.6.5, it is possible to take transaction fees from Cosmos SDK's FeeCollector for the current block by sending a custom crafted MsgEthereumTx. User funds and balances are safe. Patches This problem has been patched in Cronos v0.6.5 on the mempool...

Drainage of FeeCollector's Block Transaction Fees in cronos

Impact In Cronos nodes running versions before v0.6.5, it is possible to take transaction fees from Cosmos SDK's FeeCollector for the current block by sending a custom crafted MsgEthereumTx. User funds and balances are safe. Patches This problem has been patched in Cronos v0.6.5 on the mempool...

Slippage protection

Handle pauliax Vulnerability details Impact functions buyMalt and sellMalt, and removeLiquidity have no slippage protection and addLiquidity hardcodes it to 5%: 0, // amountOutMin Mempool snipers can profit from that by monitoring the chain and sandwiching these functions. Now it is left for the...

Unused slippage params

Handle pauliax Vulnerability details Impact Unused slippage params. function addLiquidity in VaderRouter both V1 and V2 do not use slippage parameters: uint256, // amountAMin = unused uint256, // amountBMin = unused making it susceptible to sandwich attacks / MEV. For a more detailed explanation,...

UVI-2021-1002147 dm: fix mempool NULL pointer race when completing IO

dm: fix mempool NULL pointer race when completing IO This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002078 dm: fix mempool NULL pointer race when completing IO

dm: fix mempool NULL pointer race when completing IO This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...