23 matches found
Astra Linux – Vulnerability in Linux
The fs/seqfile.c file in the Linux kernel versions 3.16 through 5.13.x, prior to 5.13.4, does not properly restrict seq buffer allocations. This results in an integer overflow, an Out-of-bounds Write, and an escalation of privileges to the root user by an unprivileged user, identified as...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: flowlabel: defer exclusive option free until RCU teardown The ip6flseqshow function iterates through the global flowlabel hash under the seq-file. It uses a RCU read-side lock and prints fl-opt-optnflen whenever an...
PT-2026-82115
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the L2TP module when userspace closes /proc/net/pppol2tp or /sys/kernel/debug/l2tp/tunnels before reaching the end-of-file. The iteration state,...
SUSE CVE-2026-64251
In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...
CVE-2026-64251 pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...
CVE-2022-50380
In the Linux kernel, the following vulnerability has been resolved: mm: /proc/pid/smapsrollup: fix no vma's null-deref Commit 258f669e7e88 "mm: /proc/pid/smapsrollup: convert to single value seqfile" introduced a null-deref if there are no vma's in the task in showsmapsrollup...
Important: kernel
Issue Overview: An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash or a leak of internal kernel information. The issue results from no...
PT-2021-29907
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue concerns the seq file function, which is related to handling sequence files. It involves disallowing extremely large seq buffer allocations. The actual impact and potential for...
PT-2021-25912
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to extremely large seq buffer allocations in the seq file function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-25848
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to extremely large seq buffer allocations in the seq file function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-25942
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue is related to extremely large seq buffer allocations in the seq file function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-25793
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to extremely large seq buffer allocations in the seq file function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
kernel: size_t-to-int conversion vulnerability in the filesystem layer
An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash, leak of internal kernel information and can escalate privileges. The issue results...
kernel: size_t-to-int conversion vulnerability in the filesystem layer
An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash, leak of internal kernel information and can escalate privileges. The issue results...
kernel: size_t-to-int conversion vulnerability in the filesystem layer
An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash, leak of internal kernel information and can escalate privileges. The issue results...
kernel: size_t-to-int conversion vulnerability in the filesystem layer
An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash, leak of internal kernel information and can escalate privileges. The issue results...
AZL-6565 CVE-2021-33909 affecting package kernel for versions less than 5.10.78.1-1
fs/seqfile.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05...
kernel: Use after free in seq file
A flaw was found in the Linux kernel's implementation of seqfile where a local attacker could manipulate memory in the put function pointer. This could lead to memory corruption and possible privileged escalation...
kernel: Use after free in seq file
A flaw was found in the Linux kernel's implementation of seqfile where a local attacker could manipulate memory in the put function pointer. This could lead to memory corruption and possible privileged escalation...
kernel: Use after free in seq file
A flaw was found in the Linux kernel's implementation of seqfile where a local attacker could manipulate memory in the put function pointer. This could lead to memory corruption and possible privileged escalation...