linux_kernel Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/linux_kernel/ Sun, 26 Feb 2023 06:50:29 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png linux_kernel Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/linux_kernel/ 32 32 CVE-2018-5873 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5873/ Sun, 26 Feb 2023 06:50:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5873/ An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch […]

The post CVE-2018-5873 appeared first on CVE Vulnerability.

]]> An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05.

The post CVE-2018-5873 appeared first on CVE Vulnerability.

]]> CVE-2018-3929 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3929/ Sun, 26 Feb 2023 06:49:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3929/ An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted PowerPoint (PPT) document can lead to heap corruption, resulting in remote code execution.

The post CVE-2018-3929 appeared first on CVE Vulnerability.

]]> An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted PowerPoint (PPT) document can lead to heap corruption, resulting in remote code execution.

The post CVE-2018-3929 appeared first on CVE Vulnerability.

]]> CVE-2018-3930 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3930/ Sun, 26 Feb 2023 06:49:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3930/ In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `vbgetfp` method.

The post CVE-2018-3930 appeared first on CVE Vulnerability.

]]> In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `vbgetfp` method.

The post CVE-2018-3930 appeared first on CVE Vulnerability.

]]> CVE-2018-16884 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16884/ Sun, 26 Feb 2023 06:47:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16884/ A flaw was found in the Linux kernel’s NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the […]

The post CVE-2018-16884 appeared first on CVE Vulnerability.

]]> A flaw was found in the Linux kernel’s NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.

The post CVE-2018-16884 appeared first on CVE Vulnerability.

]]> CVE-2018-16880 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16880/ Sun, 26 Feb 2023 06:47:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16880/ A flaw was found in the Linux kernel’s handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation […]

The post CVE-2018-16880 appeared first on CVE Vulnerability.

]]> A flaw was found in the Linux kernel’s handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. Versions from v4.16 and newer are vulnerable.

The post CVE-2018-16880 appeared first on CVE Vulnerability.

]]> CVE-2018-14619 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-14619/ Sun, 26 Feb 2023 06:46:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-14619/ A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The “null skcipher” was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able […]

The post CVE-2018-14619 appeared first on CVE Vulnerability.

]]> A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The “null skcipher” was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.

The post CVE-2018-14619 appeared first on CVE Vulnerability.

]]> CVE-2020-36158 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-36158/ Sun, 26 Feb 2023 06:41:32 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-36158/ mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.

The post CVE-2020-36158 appeared first on CVE Vulnerability.

]]> mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.

The post CVE-2020-36158 appeared first on CVE Vulnerability.

]]> CVE-2020-35499 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35499/ Sun, 26 Feb 2023 06:41:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35499/ A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in net/bluetooth/sco.c do not have a sanity check for a socket connection, when using BT_SNDMTU/BT_RCVMTU for SCO sockets. This could allow a local attacker with a special user privilege to crash the system (DOS) or leak kernel […]

The post CVE-2020-35499 appeared first on CVE Vulnerability.

]]> A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in net/bluetooth/sco.c do not have a sanity check for a socket connection, when using BT_SNDMTU/BT_RCVMTU for SCO sockets. This could allow a local attacker with a special user privilege to crash the system (DOS) or leak kernel internal information.

The post CVE-2020-35499 appeared first on CVE Vulnerability.

]]> CVE-2020-29369 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-29369/ Sun, 26 Feb 2023 06:40:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-29369/ An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.

The post CVE-2020-29369 appeared first on CVE Vulnerability.

]]> An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe.

The post CVE-2020-29369 appeared first on CVE Vulnerability.

]]> CVE-2020-27815 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-27815/ Sun, 26 Feb 2023 06:40:27 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-27815/ A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

The post CVE-2020-27815 appeared first on CVE Vulnerability.

]]> A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

The post CVE-2020-27815 appeared first on CVE Vulnerability.

]]>