PT-2021-25197

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...

PT-2021-28951

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.9.267 through 4.9.268 Description The issue is related to a use-after-free error in the llcp sock bind/connect function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2021-28927

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.19.187 through 4.19.190 Description A use-after-free issue was discovered in the net/nfc component, specifically affecting llcp sock bind and connect functions. The actual impact and attack plausibility have not yet bee...

PT-2021-28868

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.30 through 5.10.36 Description The issue is related to a use-after-free error in the llcp sock bind/connect functionality. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-28905

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.112 through 5.4.118 Description A use-after-free issue exists in the net/nfc component, specifically affecting llcp sock bind and connect functions. The actual impact and attack plausibility have not yet been proven...

PT-2021-24911

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.4.112 through 5.4.118 Description: A use-after-free issue was discovered in the net/nfc component, specifically affecting llcp sock bind and connect functions. The actual impact and attack plausibility have not yet bee...

PT-2021-24933

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.19.187 through 4.19.190 Description: The issue is related to a use-after-free error in the llcp sock bind/connect functionality. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-24949

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.14.231 through 4.14.232 Description: The issue is related to a use-after-free error in the llcp sock bind/connect functionality. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-24957

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.9.267 through 4.9.268 Description: The issue is related to a use-after-free error in the llcp sock bind/connect function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-24780

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.3 Description The issue is related to a use-after-free error in the llcp sock bind/connect functionality. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-28955

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.4.267 through 4.4.268 Description The issue is related to a use-after-free error in the llcp sock bind/connect function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

DEBIAN-CVE-2020-25671

A vulnerability was found in Linux Kernel, where a refcount leak in llcpsockconnect causing use-after-free which might lead to privilege escalations...

AZL-34855 CVE-2020-25672 affecting package kernel for versions less than 6.6.35.1-4

A memory leak vulnerability was found in Linux kernel in llcpsockconnect...

Linux kernel llcp_sock_bind/connect use-after-free

...

PT-2021-13132

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-11 Description: The issue is related to possible memory corruption due to a use after free in the on l2cap data ind function of btif sock l2cap.cc. This could lead to remote code execution over...

AZL-6530 CVE-2021-23133 affecting package kernel for versions less than 5.10.78.1-1

A race condition in Linux kernel SCTP sockets net/sctp/socket.c before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctpdestroysock is called without socknetsk-sctp.addrwqlock then an element is removed from the...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a Competitive Condition Issue vulnerability that stems from the sctpdestroysock function causing memory corruption, which triggers a denial of service...

PT-2021-4247

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12-rc8 Description A race condition in the Linux kernel's SCTP sockets can lead to kernel privilege escalation. This issue arises when sctp destroy sock is called without proper locking, allowing an element to ...

The vulnerability in the implementation of the dev_map_init_map and sock_map_alloc functions in the Linux kernel allows a hacker to trigger a system crash or enhance their privileges.

The vulnerability of the devmapinitmap and sockmapalloc functions in the Linux kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause the system to crash or increase their privileges...

DEBIAN-CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...