23 matches found
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073358)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073358 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error sndpcmossprocwrite links a newly allocated...
CVE-2026-64001
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error sndpcmossprocwrite links a newly allocated setup entry into the OSS setup list before duplicating the task name. If the task-name allocation fails, the error path frees the...
CVE-2026-64001: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error sndpcmossprocwrite links a newly allocated setup entry into the OSS setup list before duplicating the task name. If the task-name allocation fails, the error path frees the...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the ALSA PCM OSS subsystem’s issue of reusing memory after it is released, when handling proc write errors. This could allow attackers to re-use the memory that was previously released when opening OSS devices later on...
CVE-2025-58341
A vulnerability exists in the Wi-Fi driver of Samsung Mobile Processor and Wearable Processor models, including Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000 . The root cause is unbounded memory allocation via a large buffer during a write operation to the /proc/drive...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001877)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001877 advisory. Buffer overflow in the exitcodeprocwrite function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in procwritesimdisk A malicious user could pass an arbitrarily bad value to memdupusernul, potentially causing a kernel crash. This follows the same pattern as commit ee76746387f6 "netdevsim:...
kernel: smb: client: fix potential UAF in cifs_stats_proc_write()
A flaw was found in the Linux kernel CIFS client. cifsstatsprocwrite can use server statistics after they have been freed. A local user who can write that proc file can crash the kernel...
Improper File Access
runc is vulnerable to improper file access. The vulnerability is due to insufficient validation of write targets in /proc during concurrent container execution with shared mounts, which allows an attacker to exploit race conditions and redirect writes to unintended procfs files...
EUVD-2025-150381
In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in procwritesimdisk A malicious user could pass an arbitrarily bad value to memdupusernul, potentially causing kernel crash. This follows the same pattern as commit ee76746387f6 "netdevsim:...
UBUNTU-CVE-2025-40193
In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in procwritesimdisk A malicious user could pass an arbitrarily bad value to memdupusernul, potentially causing kernel crash. This follows the same pattern as commit ee76746387f6 "netdevsim:...
CVE-2025-40193 xtensa: simdisk: add input size check in proc_write_simdisk
In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in procwritesimdisk A malicious user could pass an arbitrarily bad value to memdupusernul, potentially causing kernel crash. This follows the same pattern as commit ee76746387f6 "netdevsim:...
CVE-2025-40193
In CVE-2025-40193, the Linux kernel’s xtensa simdisk component (proc_write_simdisk) lacks an input size check, allowing a malicious user to pass an invalid value to memdup_user_nul() and potentially crash the kernel. The issue is tied to changes referenced as a pattern to the nsim_dev_health_brea...
CVE-2025-40193
In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in procwritesimdisk A malicious user could pass an arbitrarily bad value to memdupusernul, potentially causing kernel crash. This follows the same pattern as commit ee76746387f6 "netdevsim:...
SUSE-SU-2025:4079-1 Security update for podman
This update for podman fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions bsc1252376 - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related races bsc1252376 - CVE-2025-52881: Fixed...
AZL-70586 CVE-2025-52881 affecting package kubernetes for versions less than 1.30.10-18
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts we have also verified thi...
PT-2025-45375
Name of the Vulnerable Software and Affected Versions runc version 1.2.7 runc version 1.3.2 runc version 1.4.0-rc.2 Description runc is a CLI tool for spawning and running containers according to the OCI specification. A race condition exists that allows an attacker to trick the tool into...
smb: client: fix potential UAF in cifs_stats_proc_write()
...
Linux Kernel Audio Buffer Overflow DoS
The vulnerability of the sndpcmlibpreallocateprocwrite function in the sound/core/pcmmemory.c module, which is part of Linux’s audio card support, relates to the reallocation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
CVE-2022-49288
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent prealloc proc writes We have no protection against concurrent PCM buffer preallocation changes via proc files, and it may potentially lead to UAF or some weird problem. This patch applies the...