PT-2021-26576

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility have...

PT-2021-30469

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description A use-after-free UAF issue exists in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet been proven...

PT-2021-30511

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue concerns the stack handling in the idle kvm start guest function. It was introduced in version v5.2 and fixed in version v5.10.76. The actual impact and attack plausibility have not...

PT-2021-30573

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue concerns a problem with stack handling in the idle kvm start guest function. It was introduced in version v5.2 and fixed in version v5.14.15. The actual impact and attack plausibili...

PT-2021-30640

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.13 through 5.15 Description The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility have...

PT-2021-26516

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue concerns a problem with stack handling in the idle kvm start guest function. The actual impact and potential for attack have not been confirmed. Recommendations For Linux Kernel...

PT-2021-30565

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not been...

PT-2021-30506

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This bug was introduced in version v5.4 and fixed in...

PT-2021-26647

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue concerns a problem with stack handling in the idle kvm start guest function. It was introduced in version v5.2 and fixed in version v5.15. The actual impact and attack plausibility...

PT-2021-26578

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue concerns a problem with stack handling in the idle kvm start guest function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel...

PT-2021-26511

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This bug was introduced in version v5.4 and is fixed in...

PT-2021-26474

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description A use-after-free UAF issue exists in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet been proven...

PT-2021-26639

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This bug was introduced in version v5.4 and fixed in...

PT-2021-30642

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.2 through 5.14 Description The issue concerns a problem with stack handling in the idle kvm start guest function. It was introduced in version 5.2 and fixed in version 5.15. The actual impact and attack plausibility hav...

PT-2021-26478

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue concerns a problem with stack handling in the idle kvm start guest function. The actual impact and potential for attack have not been confirmed. Recommendations For Linux Kernel...

PT-2021-26570

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet...

OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Swing. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

CVE-2021-26320

Insufficient validation of the AMD SEV Signing Key ASK in the SENDSTART command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...

python: Information disclosure via pydoc

A flaw was found in Python 3's pydoc. This flaw allows a local or adjacent attacker who discovers or can convince another local or adjacent user to start a pydoc server to access the server and then use it to disclose sensitive information belonging to the other user that they would not normally...

kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function in drivers/net/wireless/marvell/mwifiex/join.c via a long SSID value

A flaw was found in the Linux kernel. The marvell wifi driver could allow a local attacker to execute arbitrary code via a long SSID value in mwifiexcmd80211adhocstart function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...