3 matches found
CVE-2018-14634
CVE-2018-14634 is a Linux kernel integer overflow vulnerability in create_elf_tables(). An unprivileged local user with access to a SUID (or otherwise privileged) binary could escalate privileges. Documented vulnerable kernel families include 2.6.x, 3.10.x, and 4.14.x. Mitigations/recognitions ex...
CVE-2019-3896
CVE-2019-3896 is described in connected documents as a kernel flaw: a double-free can occur in idr_remove_all() inside lib/idr.c of the Linux kernel 2.6 branch. An unprivileged local attacker could exploit this for privilege escalation or to crash the system (DoS). The affected component is the L...
CVE-2011-0695
CVE-2011-0695 is a race condition in the Linux kernel’s InfiniBand driver (cm_work_handler in drivers/infiniband/core/cma.c) on 2.6.x. The issue allows remote attackers to trigger a denial of service (panic) by issuing an InfiniBand request while other request handlers are active, causing an inva...