Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. The vulnerability exists due to the use-after-free in the NFC stack, allowing an attacker to crash the application...

Ubuntu: Security Advisory (USN-5210-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5210-2: Linux kernel regression

USN-5210-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression that caused failures to boot in environments with AMD Secure Encrypted Virtualization SEV enabled. This update fixes the problem. We apologize for the inconvenience. Original advisory details:...

PT-2022-1943

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.16.12 Description The issue is related to the implementation of the st21nfca connectivity event received function in the Linux kernel, which is vulnerable to buffer overflows due to untrusted length parameters...

Ubuntu: Security Advisory (USN-5218-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5218-1: Linux kernel (OEM) vulnerabilities

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. CVE-2021-4002 It was discovered that the eBPF implementation in the Linux...

USN-5218-1 linux-oem-5.13 vulnerabilities

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. CVE-2021-4002 It was discovered that the eBPF implementation in the Linux...

GSD-2022-1000050 NFC: st21nfca: Fix memory leak in device probe and remove

NFC: st21nfca: Fix memory leak in device probe and remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit...

GSD-2022-1000043 NFC: st21nfca: Fix memory leak in device probe and remove

NFC: st21nfca: Fix memory leak in device probe and remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000029 NFC: st21nfca: Fix memory leak in device probe and remove

NFC: st21nfca: Fix memory leak in device probe and remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.170 by commit...

GSD-2022-1000022 NFC: st21nfca: Fix memory leak in device probe and remove

NFC: st21nfca: Fix memory leak in device probe and remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit...

GSD-2022-1000017 NFC: st21nfca: Fix memory leak in device probe and remove

NFC: st21nfca: Fix memory leak in device probe and remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.261 by commit...

CVE-2021-39996

There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow...

CVE-2021-39996

There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow...

Heap overflow

There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow...

CVE-2021-4202

A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem...

PT-2022-28313

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.224 Description A memory leak issue was discovered in the device probe of the st21nfca NFC driver. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux...

PT-2022-28341

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.15.12 Description A memory leak issue was discovered in the device probe of the st21nfca NFC driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28308

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 4.14.260 Description A memory leak issue was discovered in the device probe of the st21nfca NFC driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28334

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.10.89 Description A memory leak issue was discovered in the device probe of the st21nfca NFC driver. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Lin...