kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel

A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The...

CVE-2022-50821 SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...

Juniper Networks Junos OS RPC Competitive Condition Vulnerability

Juniper Networks Junos OS is a network operating system dedicated to the company's hardware systems. A competitive condition vulnerability in the RPCs of Juniper Networks Junos OS allows remote attackers to exploit the vulnerability to gain ownership of files, read, delete, and modify arbitrary...