Linux kernel resource management error vulnerability (CNVD-2019-35843)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the xfssetattrnonsize file in fs/xfs/xfsiops.c in Linux kernel 5.2.9 and earlier versions, which can be exploited b...

The vulnerability of the af_alg_release function in the Linux operating system allows a hacker to execute arbitrary code in kernel mode.

The vulnerability of the afalgrelease function crypto/afalg.c in the Linux kernel is related to the ignoring of setting the NULL value in certain fields of the sockfssetattr structure. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode...

Linux kernel memory misreference vulnerability (CNVD-2019-47010)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory misreference vulnerability exists in sockfssetattr in Linux kernel versions 4.20.10 and earlier, which stems from the 'afalgrelease' function in the...

UBUNTU-CVE-2019-8912

In the Linux kernel through 4.20.11, afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfssetattr...

PT-2019-2520

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.20.11 PAN-OS versions prior to 7.1.24 PAN-OS versions prior to 8.0.18 PAN-OS versions prior to 8.1.9 PAN-OS versions prior to 9.0.3 Description The issue is related to a use-after-free in the Linux kernel's...

Linux kernel denial of service vulnerability (CNVD-2018-06432)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the ocfs2setattr function in fs/ocfs2/file.c in the Linux kernel prior to...

PT-2018-6733

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.2 Description: The issue allows local users to cause a denial of service deadlock via DIO requests. This is due to a problem in the ocfs2 setattr function in fs/ocfs2/file.c. Recommendations: For Linux kern...

PT-2019-14255

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.2.9 Description An issue was discovered in xfs setattr nonsize in fs/xfs/xfs iops.c. XFS partially wedges when a chgrp fails due to being out of disk quota. xfs setattr nonsize is failing to unlock the ILOCK aft...

kernel: Permission bypass on overlayfs during copy_up

The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...

kernel: Permission bypass on overlayfs during copy_up

The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...

kernel: Permission bypass on overlayfs during copy_up

The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...

DEBIAN-CVE-2015-1350

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service capability stripping via a failed invocation of a system call, as...

CVE-2015-1350

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service capability stripping via a failed invocation of a system call, as...

Code injection

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service capability stripping via a failed invocation of a system call, as...

CVE-2015-1350

CVE-2015-1350 is confirmed in the Connected documents as a vulnerability in the Linux kernel VFS subsystem (3.x) where setattr operations underspecify removal of extended privilege attributes. This can allow local users to cause a denial of service by stripping capabilities from specific processe...

CVE-2015-1350

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service capability stripping via a failed invocation of a system call, as...

UBUNTU-CVE-2015-1350

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service capability stripping via a failed invocation of a system call, as...

CVE-2015-1350

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service capability stripping via a failed invocation of a system call, as...

CVE-2015-1350: Files or Directories Accessible to External Parties

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service capability stripping via a failed invocation of a system call, as...

The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the graphite2::Slot::setAttr function in Firefox ESR and Firefox browsers, as well as in the Graphite 2 rendering software, is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effect...