GSD-2021-1000577 net: lantiq: fix memory corruption in RX ring

net: lantiq: fix memory corruption in RX ring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

GSD-2021-1000529 net: lantiq: fix memory corruption in RX ring

net: lantiq: fix memory corruption in RX ring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

UVI-2021-1000529 net: lantiq: fix memory corruption in RX ring

net: lantiq: fix memory corruption in RX ring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

DEBIAN-CVE-2021-3489

The eBPF RINGBUF bpfringbufreserve function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee "bp...

CVE-2021-3489

The eBPF RINGBUF bpfringbufreserve function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee "bp...

PT-2021-29042

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.10.41 Description The issue is related to memory corruption in the RX ring. It was introduced in version v4.20 and fixed in Linux Kernel version v5.10.42. The actual impact and attack plausibility have not...

PT-2021-28994

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue concerns a memory corruption in the RX ring, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2021-25048

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.10.41 Description A memory corruption issue in the RX ring of the Lantiq driver has been identified. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Lin...

PT-2021-25087

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.124 Description The issue concerns a memory corruption in the RX ring of the Lantiq driver. It was introduced in version v4.20 and fixed in version v5.4.124. The actual impact and attack plausibility have no...

PT-2021-29081

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.124 Description The issue concerns a memory corruption in the RX ring of the Lantiq driver. It was introduced in version v4.20 and fixed in version v5.4.124. The actual impact and attack plausibility have no...

UVI-2021-1000329 libbpf: Fix signed overflow in ringbuf_process_ring

libbpf: Fix signed overflow in ringbufprocessring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

Your Amazon Devices to Automatically Share Your Wi-Fi With Neighbors

Starting June 8, Amazon will automatically enable a feature on its family of hardware devices, including Echo speakers, Ring Video Doorbells, Ring Floodlight Cams, and Ring Spotlight Cams, that will share a small part of your Internet bandwidth with nearby neighbors — unless you choose to opt-out...

PT-2021-28794

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.37 Description The issue is related to a signed overflow in the ringbuf process ring function. It was introduced in version v5.8 and fixed in version v5.10.38. The actual impact and attack plausibility...

PT-2021-24683

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.12.4 Description A signed overflow issue in the ringbuf process ring function of libbpf has been identified. The actual impact and attack plausibility of this issue have not yet been proven. Recommendation...

Debian: Security Advisory (DLA-2665-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2665-1] ring security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2665-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 23, 2021 https://wiki.debian.org/LTS -...

PT-2022-1369 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the Linux kernel’s io uring subsystem, allowing a local user to crash or escalate their privileges on the system. This issue is related to the way a...

CVE-2021-31728

Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to .\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a hook...

CVE-2021-31728

Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to .\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a hook...

MalwareFox Anti-Malware 安全漏洞

MalwareFox Anti-Malware is an application from the American company MalwareFox. A malicious code detection software. A security vulnerability exists in MalwareFox AntiMalware 2.74.0.150, which allows the execution of ring 0 code to be exposed in the context of a driver, allowing an unprivileged...