h700s_firmware Archives - CVE Vulnerability

CVE-2021-43057

Thu, 23 Feb 2023 14:12:23 +0000

An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinux_ptrace_traceme (aka the SELinux handler for PTRACE_TRACEME) could be used by local attackers to cause memory corruption and escalate privileges, aka CID-a3727a8bac0a. This occurs because of an attempt to access the subjective credentials of another task.

The post CVE-2021-43057 appeared first on CVE Vulnerability.

CVE-2021-38300

Thu, 23 Feb 2023 14:11:09 +0000

arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architecture.

The post CVE-2021-38300 appeared first on CVE Vulnerability.

CVE-2021-34866

Thu, 23 Feb 2023 14:10:22 +0000

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-14689.

The post CVE-2021-34866 appeared first on CVE Vulnerability.

CVE-2022-45934

godfreyd94 — Thu, 23 Feb 2023 05:21:31 +0000

An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.

The post CVE-2022-45934 appeared first on CVE Vulnerability.

CVE-2022-3545

godfreyd94 — Thu, 23 Feb 2023 05:19:39 +0000

A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.

The post CVE-2022-3545 appeared first on CVE Vulnerability.

CVE-2022-2318

Thu, 23 Feb 2023 05:02:59 +0000

There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.

The post CVE-2022-2318 appeared first on CVE Vulnerability.

CVE-2022-1786

Thu, 23 Feb 2023 05:02:11 +0000

A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task completing submissions on this ring. This flaw allows a local user to crash or escalate their privileges on the system.

The post CVE-2022-1786 appeared first on CVE Vulnerability.

CVE-2022-0998

Thu, 23 Feb 2023 05:02:00 +0000

An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

The post CVE-2022-0998 appeared first on CVE Vulnerability.