UBUNTU-CVE-2021-38160

In drivers/char/virtioconsole.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf-len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any existing use case; th...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the Linux kernel driver char virtio console.c. Data corruption or loss may be triggered by an untrusted...

PT-2021-29830

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is a potential security issue, although the actual impact and attack plausibility...

PT-2021-29729

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.52 Description The issue is related to the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security...

PT-2021-29910

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security vulnerabilitie...

PT-2021-25835

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security...

PT-2021-29653

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.4 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security vulnerabilities...

PT-2021-25734

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.52 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security vulnerabilitie...

PT-2021-25915

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security vulnerabilitie...

PT-2021-29877

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security...

PT-2021-25946

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-29796

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security vulnerabilitie...

PT-2021-29941

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-25801

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security...

PT-2021-25882

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security...

PT-2021-25658

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.4 Description: The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security...

PT-2021-4241

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13.4 Description The issue is caused by a buffer overflow on the stack in the drivers/char/virtio console.c file of the Linux kernel. An untrusted device can trigger data corruption or loss by supplying a buf-l...

USN-3314-1: Linux kernel vulnerabilities

It was discovered that the keyring implementation in the Linux kernel in some situations did not prevent special internal keyrings from being joined by userspace keyrings. A privileged local attacker could use this to bypass module verification. CVE-2016-9604 It was discovered that a buffer...

Ubuntu 17.04 : linux, linux-raspi2 vulnerabilities (USN-3314-1)

It was discovered that the keyring implementation in the Linux kernel in some situations did not prevent special internal keyrings from being joined by userspace keyrings. A privileged local attacker could use this to bypass module verification. CVE-2016-9604 Daniel Jiang discovered that a race...

CVE-2017-8067

drivers/char/virtioconsole.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than...