PT-2021-25255

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.43 Description A potential issue exists in the btrfs filesystem, specifically in the rename exchange function, where an abort can occur if the insertion of the second reference fails. The actual impact and...

PT-2021-29225

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.125 Description A potential security issue has been identified in the Linux Kernel, related to the x86/kvm component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-29253

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.43 Description A potential security issue has been identified in the Linux Kernel, related to the x86/kvm component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-25231

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.125 Description A potential security issue has been identified in the Linux Kernel, related to the x86/kvm component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-25259

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.10.43 Description: A potential security issue has been identified in the Linux Kernel, related to the x86/kvm component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

GSD-2021-1000732 pid: take a reference when initializing `cad_pid`

pid: take a reference when initializing cadpid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.236 by commit...

UVI-2021-1000728 net: caif: add proper error handling

net: caif: add proper error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.236 by commit 676d6d02de3f6b7f3a072b08d0dda819b09d31d...

UVI-2021-1000724 pid: take a reference when initializing `cad_pid`

pid: take a reference when initializing cadpid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.272 by commit...

UVI-2021-1000722 net: caif: fix memory leak in cfusbl_device_notify

net: caif: fix memory leak in cfusbldevicenotify This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.272 by commit...

UVI-2021-1000721 net: caif: fix memory leak in caif_device_notify

net: caif: fix memory leak in caifdevicenotify This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.272 by commit...

UVI-2021-1000720 net: caif: add proper error handling

net: caif: add proper error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.272 by commit 4f6da6c526a0bf470536b59fdb219d11336e390e...

UVI-2021-1000716 pid: take a reference when initializing `cad_pid`

pid: take a reference when initializing cadpid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.272 by commit...

GSD-2021-1000713 net: caif: fix memory leak in caif_device_notify

net: caif: fix memory leak in caifdevicenotify This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.272 by commit...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write. A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to application crash and other consequences. Remediation A fix was pushed into the...

Race condition

When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code. This vulnerability affects Firefox 88.0.1 and Firefox for Android 88.1.3...

Denial of Service (DoS)

Overview bindata is a BinData is a declarative way to read and write binary file formats. This means the programmer specifies what the format of the binary data is, and BinData works out how to read and write data in this format. It is an easier and more readable alternative to ruby's pack and...

CVE-2021-32823 Potential Denial-of-Service in bindata

In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit. In combination with...

SUSE-SU-2021:2123-1 Security update for dovecot23

This update for dovecot23 fixes the following issues: - CVE-2021-29157: Local attacker can login as any user and access their emails bsc1187418 - CVE-2021-33515: Attacker can potentially steal user credentials and mails bsc1187419...

Threat Source newsletter (June 17, 2021)

Newsletter compiled by Jon Munshaw.Good afternoon, Talos readers. Although the Colonial Pipeline attack is largely behind us now, its potential repercussions are not. This was just the latest in a string of attacks against American critical infrastructure over the past few years, and we... This i...

CVE-2021-24489

A potential security vulnerability in some Intel® Virtualization Technology for Directed I/0 VT-d products may allow escalation of privilege. Bugs Notes Author| Note ---|--- mdeslaur | INTEL-SA-00442...