Design/Logic Flaw

A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while runnin...

CVE-2021-20317

A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while runnin...

Linux kernel has unspecified vulnerabilities (CNVD-2022-06509)

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable due to a corrupted timer tree resulting in a missing task wakeup in the timerqueueadd function in lib/timerqueue.c. The vulnerability can be exploited to cause a denial of...

CVE-2021-20317

A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while runnin...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable due to a corrupted timer tree resulting in a missing task wakeup in the timerqueueadd function in lib/timerqueue.c. The vulnerability can be exploited to cause a denial of...

Monopolization of the bidding platform

Handle animixar Vulnerability details Impact This is potentially a low-to-medium risk vulnerability as this will lead to the platform being monopolized by a handful of people; preventing any adoption and growth. Proof of Concept A very few super-users with a lot of funds at their disposal can mak...

SUSE-SU-2021:2788-1 Security update for go1.16

This update for go1.16 fixes the following issues: Update to go1.16.7: - go47473 net/http: panic due to racy read of persistConn after handler panic CVE-2021-36221 bsc1189162 - go47348 cmd/go: 'go list -f '.Stale'' stack overflow with cyclic imports - go47332 time: Timer reset broken under heavy...

GSD-2021-1001478 watchdog: Fix possible use-after-free by calling del_timer_sync()

watchdog: Fix possible use-after-free by calling deltimersync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.276 by commit...

UVI-2021-1001165 netrom: Decrease sock refcount when sock timers expire

netrom: Decrease sock refcount when sock timers expire This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

PT-2021-29837

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. This problem has been identified but its actual impact and potential for...

PT-2021-25842

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for exploitation have not been confirmed...

PT-2021-25917

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for attack have not been confirmed. Recommendation...

PT-2021-29943

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for exploitation have not been fully determined...

PT-2021-29655

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.4 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. This problem is noted in an automated ID aimed at discovering potential security...

PT-2021-25800

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for attack have not been confirmed. Recommendation...

PT-2021-29879

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description A potential issue exists where a use-after-free condition could be triggered by calling del timer sync. The actual impact and likelihood of an attack have not been confirmed. Recommendations...

PT-2021-29734

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.52 Description The issue is related to a possible use-after-free condition by calling del timer sync. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25660

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.4 Description: The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for attack have not been confirmed...

PT-2021-29912

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for exploitation have not been confirmed...

Cross site scripting

The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.8 does not sanitise or escape its 'Modify default Redirect Delay timer' setting, allowing high privilege users to use JavaScript code in it, even when the unfilteredhtml capability is disallowed, leading to an...