327 matches found
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: In the bcm function, there was an issue where bo-bcmprocread was cleared after the removeprocentry function was called. The syzbot tool reported a warning in the bcmrelease function. The bug fix addressed another warning that...
The vulnerability of Linux operating system’s kernel’s fs/proc components, which allows a hacker to cause a service failure
The vulnerability of the fs/proc components in the Linux operating system’s kernel is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...
UBUNTU-CVE-2025-21646
In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes, but a problem occurs if someone actually does that: kafs tries to create a directory under /proc/net/afs/ with the name o...
UBUNTU-CVE-2024-56779
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4openowner leak when concurrent nfsd4open occur The action force umountumount -f will attempt to kill all rpctask even umount operation may ultimately fail if some files remain open. Consequently, if an action attemp...
PT-2025-34414
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free UAF issue exists in the proc file system. A direct check of pde-proc ops-proc lseek may lead to a UAF condition during a rmmod scenario. This is due to a gap in proc r...
SUSE CVE-2024-47733
In the Linux kernel, the following vulnerability has been resolved: netfs: Delete subtree of 'fs/netfs' when netfs module exits In netfsinit or fscacheprocinit, we create dentry under 'fs/netfs', but in netfsexit, we only delete the proc entry of 'fs/netfs' without deleting its subtree. This...
DEBIAN-CVE-2024-47733
In the Linux kernel, the following vulnerability has been resolved: netfs: Delete subtree of 'fs/netfs' when netfs module exits In netfsinit or fscacheprocinit, we create dentry under 'fs/netfs', but in netfsexit, we only delete the proc entry of 'fs/netfs' without deleting its subtree. This...
UBUNTU-CVE-2024-47733
In the Linux kernel, the following vulnerability has been resolved: netfs: Delete subtree of 'fs/netfs' when netfs module exits In netfsinit or fscacheprocinit, we create dentry under 'fs/netfs', but in netfsexit, we only delete the proc entry of 'fs/netfs' without deleting its subtree. This...
SUSE CVE-2024-46771
In the Linux kernel, the following vulnerability has been resolved: can: bcm: Remove proc entry when dev is unregistered. syzkaller reported a warning in bcmconnect below. 0 The repro calls connect to vxcan1, removes vxcan1, and calls connect with ifindex == 0. Calling connect for a BCM socket...
DEBIAN-CVE-2024-46771
In the Linux kernel, the following vulnerability has been resolved: can: bcm: Remove proc entry when dev is unregistered. syzkaller reported a warning in bcmconnect below. 0 The repro calls connect to vxcan1, removes vxcan1, and calls connect with ifindex == 0. Calling connect for a BCM socket...
scsi: core: Fix unremoved procfs host directory regression
...
USN-6955-1 linux-oem-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - M68K architecture; - OpenRISC architecture; - PowerPC architecture; -...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which originates from a sensitive information disclosure issue in the...
PT-2024-26009 · Smr · Smr
Name of the Vulnerable Software and Affected Versions: SMR versions prior to Jul-2024 Release 1 Description: The issue allows local attackers to read kernel memory address due to exposure of sensitive information in the proc file system. Recommendations: For versions prior to Jul-2024 Release 1,...
SUSE CVE-2024-36939
In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpcprocregister in nfsnetinit. syzkaller reported a warning 0 triggered while destroying immature netns. rpcprocregister was called in initnfsfs, but its error has been ignored since at least the initial comm...
UBUNTU-CVE-2024-36939
In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpcprocregister in nfsnetinit. syzkaller reported a warning 0 triggered while destroying immature netns. rpcprocregister was called in initnfsfs, but its error has been ignored since at least the initial comm...
UBUNTU-CVE-2023-52752
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free bug in cifsdebugdataprocshow Skip SMB sessions that are being teared down e.g. @ses-sesstatus == SESEXITING in cifsdebugdataprocshow to avoid use-after-free in @ses. This fixes the following GPF wh...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a security flaw in the procfs host directory...
Oracle Linux 6 : kernel (ELSA-2011-1530)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1530 advisory. - kernel KEYS: Fix a NULL pointer deref in the user-defined key type David Howells 751190 CVE-2011-4110 - netdrv benet: remove bogus 'unlikely' on vlan...