PT-2021-28544

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.1 through v5.12.3 Description The issue concerns the handling of spurious interrupts in the irqchip/gic-v3 component. It has been noted that interrupts should not be enabled when handling such interrupts. The actual...

PT-2021-24623

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue concerns the handling of spurious interrupts in the irqchip/gic-v3 component. It has been noted that interrupts should not be enabled when handling such interrupts. The actual impac...

PT-2021-28582

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue concerns the handling of spurious interrupts in the irqchip/gic-v3 component. It has been noted that interrupts should not be enabled when handling such interrupts. The actual impac...

PT-2021-24588

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue concerns the handling of spurious interrupts in the irqchip/gic-v3 component. It has been noted that interrupts should not be enabled when handling such interrupts. The actual impac...

PT-2021-24550

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.1 through v5.12.3 Description: The issue is related to the handling of spurious interrupts in the irqchip/gic-v3 component. It was introduced in version v5.1 and fixed in version v5.12.3. The actual impact and attack...

PT-2021-28646

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue concerns the handling of spurious interrupts in the irqchip/gic-v3 component. It has been noted that interrupts should not be enabled when handling such interrupts. The actual impac...

PT-2021-8271 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 4.19.95.aarch64 and earlier Description: The vulnerability is related to the handling of spurious interrupts in the Linux kernel. When a spurious interrupt occurs, the kernel should not enable interrupts, but in this cas...

CVE-2020-0401: Missing Authorization

In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

ASB-A-150857253

In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional execution privileges needed. User interaction is not needed for exploitation...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0032)

The remote OracleVM system is missing necessary patches to address critical security updates : - uek-rpm: Add OL6 shim conflict for new signing key Eric Snowberg Orabug: 31688239 - Revert 'certs: Add Oracle's new X509 cert into the kernel keyring' Eric Snowberg Orabug: 31688223 - blk-mq: don't...

Input validation

In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed org.bouncycastle.math.raw.Nat???. These classes are used by our custom elliptic curve implementations...

CVE-2016-1000340

In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed org.bouncycastle.math.raw.Nat???. These classes are used by our custom elliptic curve implementations...

CVE-2016-1000340: Undefined Security Weakness

In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed org.bouncycastle.math.raw.Nat???. These classes are used by our custom elliptic curve implementations...

kernel: ping sockets: use-after-free leading to local privilege escalation

It was found that the Linux kernel's ping socket implementation did not properly handle socket unhashing during spurious disconnects, which could lead to a use-after-free flaw. On x86-64 architecture systems, a local user able to create ping sockets could use this flaw to crash the system. On...

kernel: ping sockets: use-after-free leading to local privilege escalation

It was found that the Linux kernel's ping socket implementation did not properly handle socket unhashing during spurious disconnects, which could lead to a use-after-free flaw. On x86-64 architecture systems, a local user able to create ping sockets could use this flaw to crash the system. On...

kernel: ping sockets: use-after-free leading to local privilege escalation

It was found that the Linux kernel's ping socket implementation did not properly handle socket unhashing during spurious disconnects, which could lead to a use-after-free flaw. On x86-64 architecture systems, a local user able to create ping sockets could use this flaw to crash the system. On...

kernel: ping sockets: use-after-free leading to local privilege escalation

It was found that the Linux kernel's ping socket implementation did not properly handle socket unhashing during spurious disconnects, which could lead to a use-after-free flaw. On x86-64 architecture systems, a local user able to create ping sockets could use this flaw to crash the system. On...

kernel: ping sockets: use-after-free leading to local privilege escalation

It was found that the Linux kernel's ping socket implementation did not properly handle socket unhashing during spurious disconnects, which could lead to a use-after-free flaw. On x86-64 architecture systems, a local user able to create ping sockets could use this flaw to crash the system. On...

Medium: kernel

Issue Overview: A buffer overflow flaw was found in the way the Linux kernel's Intel AES-NI instructions optimized version of the RFC4106 GCM mode decryption functionality handled fragmented packets. A remote attacker could use this flaw to crash, or potentially escalate their privileges on, a...

CVE-2012-5422: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS before 15.32T on AS5400 devices allows remote authenticated users to cause a denial of service spurious errors via unknown vectors, aka Bug ID CSCub61009...