CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2023:1690287378)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2023:1690287378 advisory. - A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create...

PT-2026-43171

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513282269 Crash type: UNKNOWN READ Crash state: persist target.c...

PT-2026-43173

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513035615 Crash type: Heap-buffer-overflow READ 8 Crash state: coap persist startup lkd persist target.c...

PT-2026-42862

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511948388 Crash type: Heap-buffer-overflow READ 8 Crash state: coap persist startup lkd persist target.c...

Google Android Kernel elevation of privilege vulnerability (CNVD-2023-12019)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in veritytarget in dm-verity-target.c of the Google Android Kernel, which stems from the program not properly checking for privileges. An attacker could exploit the vulnerabili...

CVE-2022-20572: Missing Authorization

In veritytarget of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20572

In veritytarget of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

Google Pixel security vulnerabilities

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in veritytarget in dm-verity-target.c of the Google Android Kernel, which stems from the program not properly checking for privileges. An attacker could exploit the vulnerabili...

PT-2022-6553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the verity ctr function in the drivers/md/dm-verity-target.c module of the Linux kernel's device-mapper subsystem. It allows an attacker with administrator...

PT-2022-10969

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is caused by a logic error in the code, leading to a possible allocation of RWX memory in the target init function of gs101/abl/target/slider/target.c. This could result in local escalation of privilege wit...

PT-2021-27505

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash type of Heap-double-free has been reported. The crash state involves the minimatch destroy function, ofctl parse flow, and ofctl parse target.c...