1947 matches found
CVE-2024-25744
In CVE-2024-25744, Linux kernel versions before 6.6.7 are vulnerable: an untrusted VMM can trigger int80 syscall handling at any point due to code in arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem_encrypt_amd.c. This is a local-privilege impact condition as described by the advisory, with a base sco...
CVE-2024-25744
In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and arch/x86/mm/memencryptamd.c...
CVE-2024-25744: Protection Mechanism Failure
In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and arch/x86/mm/memencryptamd.c...
GHSA-29C2-65RJ-H343 Nervos CKB Permit load cell data from memory
Impact The faulty nodes will reject transactions which calls loadcelldata syscall but the input cell is still in the mempool. They also ban other nodes and cause the network separation. Patches 0.35.2, 0.36.1, 0.37.1, 0.38.2...
Nervos CKB Permit load cell data from memory
Impact The faulty nodes will reject transactions which calls loadcelldata syscall but the input cell is still in the mempool. They also ban other nodes and cause the network separation. Patches 0.35.2, 0.36.1, 0.37.1, 0.38.2...
Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
Impact Tx-pool verify transaction which inputs' script contains loadcelldatahash is nondeterministic Workarounds Enforce tx-pool ResolvedTrascation inputs' load data is none...
GHSA-Q73F-W3H7-7WCC Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
Impact Tx-pool verify transaction which inputs' script contains loadcelldatahash is nondeterministic Workarounds Enforce tx-pool ResolvedTrascation inputs' load data is none...
Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-488)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-488 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring/afunix: disable sending iouring over sockets CVE-2023-52654 In the Linux kernel, the following vulnerability has been...
Linux/x64 - create a shell with execve() sending argument using XOR (/bin//sh) Shellcode (55 bytes)
Exploit Title: Linux-x64 - create a shell with execve sending argument using XOR /bin//sh 55 bytes Shellcode Author: Alexys 0x177git Tested on: Linux x8664 Shellcode Description: creating a new process using execve syscall sending bin//sh as argument | encrypted using XOR operation was QWORD size...
CVE-2023-21671
Memory Corruption in Core during syscall for Sectools Fuse comparison feature...
Memory corruption
Memory Corruption in Core during syscall for Sectools Fuse comparison feature...
CVE-2023-21671
CVE-2023-21671 is described across multiple sources as a memory corruption issue in Core during a syscall for the Sectools Fuse comparison feature. Public descriptions consistently state memory corruption in a Qualcomm-related Core/closed-source component, with a local attacker and high to critic...
CVE-2023-21671 Improper Input Validation in Core
Memory Corruption in Core during syscall for Sectools Fuse comparison feature...
CVE-2023-21671: Improper Input Validation
Memory Corruption in Core during syscall for Sectools Fuse comparison feature...
PT-2023-9485 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.55-d23900f.ppcnf-fsp2 Description: The issue is related to a problem in the ret from syscall function where the check for icache 44x need flush is done. When the flush is needed, the code jumps out-of-line t...
FreeBSD-SA-23:13.capsicum
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-23:13.capsicum Security Advisory The FreeBSD Project Topic: copyfilerange insufficient capability rights check Category: core Module: capsicum Announced:...
FreeBSD -- copy_file_range insufficient capability rights check
Problem Description: The syscall checked only for the CAPREAD and CAPWRITE capabilities on the input and output file descriptors, respectively. Using an offset is logically equivalent to seeking, and the syscall must additionally require the CAPSEEK capability. Impact: A sandboxed process with on...
USN-6385-1 linux-oem-6.0 vulnerabilities
It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. CVE-2022-27672 William Zhao discovered that the Traffic Control TC...
Oracle Linux 5 : ELSA-2014-1143-1: / kernel (ELSA-2014-11431)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-11431 advisory. - kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIGAUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially...
use-after-free flaw found in cgroup1_parse_param (possible denial of service)
A use-after-free flaw was found in cgroup1parseparam in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service ...