9 matches found
CVE-2020-35508
CVE-2020-35508 is a Linux kernel issue describing a race condition and incorrect initialization of the child/parent process ID handling when filtering signal handlers. The flaw permits a local attacker to bypass checks and send signals to a privileged process. Multiple Nessus/MiracleLinux Unity a...
CVE-2019-18805
CVE-2019-18805 affects the Linux kernel prior to 5.0.11. A signed integer overflow occurs in net/ipv4/sysctl_net_ipv4.c and in tcp_input.c (tcp_ack_update_rtt()) when a very large value is written to /proc/sys/net/ipv4/tcp_min_rtt_wlen, potentially causing a denial of service or other impact. Con...
CVE-2019-19816
CVE-2019-19816 affects the Linux kernel 5.0.21: mounting a crafted btrfs image can trigger a slab-out-of-bounds write in __btrfs_map_block in fs/btrfs/volumes.c due to mishandling of the data stripes value = 1. The connected Nessus advisory blocks (Unity Linux UTSA-2026-004332 and related plugin ...
CVE-2020-8832
The CVE-2020-8832 entry concerns the Ubuntu 18.04 LTS Linux kernel where the fix for CVE-2019-14615 (clearing data structures on context switches for certain Intel graphics processors) was incomplete. The vulnerability affects kernels prior to 4.15.0-91.92, enabling a local attacker to expose sen...
CVE-2019-19813
CVE-2019-19813 is a Linux kernel use-after-free in __mutex_lock on Linux kernel 5.0.21 when mounting a crafted btrfs image, performing operations, and calling syncfs, related to mutex_can_spin_on_owner, __btrfs_qgroup_free_meta, and btrfs_insert_delayed_items. It is a local, user-interaction-requ...
CVE-2019-19318
The CVE-2019-19318 issue affects Linux kernel 5.3.11. Root cause: mounting a crafted btrfs image twice can trigger a use-after-free in rwsem_down_write_slowpath because rwsem_can_spin_on_owner’s rwsem_owner_flags returns an already freed pointer. Documented impact per sources indicates an availab...
CVE-2019-19050
CVE-2019-19050 describes a memory leak in the Linux kernel’s crypto_reportstat() path (crypto/crypto_user_stat.c) that can cause a denial of service via memory consumption when crypto_reportstat_alg() fails, affected up to kernel 5.3.11. Connected Nessus advisories (Unity Linux UTSA-2026-003794 a...
CVE-2019-19069
CVE-2019-19069 affects the Linux kernel fastrpc DMA path. A memory leak in the function fastrpc_dma_buf_attach() (drivers/misc/fastrpc.c) can be triggered by dma_get_sgtable() failures, allowing a potential denial of service through memory consumption. The vulnerability is in kernels before 5.3.9...
CVE-2021-33060
CVE-2021-33060 is an Intel BIOS/IPU vulnerability causing an out-of-bounds write in BIOS firmware that could let an authenticated local user escalate privileges. The Intel advisory (INTEL-SA-00686) lists affected products as certain 3rd Gen Intel Xeon Scalable Processors and Intel IPU BIOS, with ...