Page 324 of 3323 results (0.022 seconds)

CVSS: 7.8EPSS: 0%CPEs: 25EXPL: 1

CVE-2021-41073

https://notcve.org/view.php?id=CVE-2021-41073

19 Sep 2021 — loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation. La función loop_rw_iter en fs/io_uring.c en el kernel de Linux desde la versión 5.10 hasta la versión 5.14.6 permite a los usuarios locales ganar privilegios mediante el uso de IORING_OP_PROVIDE_BUFFERS para desencadenar una liberación de un búfer del kernel, como se ha ... • https://github.com/chompie1337/Linux_LPE_io_uring_CVE-2021-41073 • CWE-763: Release of Invalid Pointer or Reference •

CVSS: 8.8EPSS: 0%CPEs: 76EXPL: 1

CVE-2021-3656 – kernel: SVM nested virtualization issue in KVM (VMLOAD/VMSAVE)

https://notcve.org/view.php?id=CVE-2021-3656

09 Sep 2021 — A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the en... • https://github.com/rami08448/CVE-2021-3656-Demo • CWE-862: Missing Authorization •

CVSS: 8.8EPSS: 0%CPEs: 15EXPL: 1

CVE-2021-3653 – kernel: SVM nested virtualization issue in KVM (AVIC support)

https://notcve.org/view.php?id=CVE-2021-3653

08 Sep 2021 — A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system... • http://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.html • CWE-862: Missing Authorization •

CVSS: 7.0EPSS: 0%CPEs: 31EXPL: 0

CVE-2021-40490

https://notcve.org/view.php?id=CVE-2021-40490

03 Sep 2021 — A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. Se ha detectado una condición de carrera en la función ext4_write_inline_data_end en el archivo fs/ext4/inline.c en el subsistema ext4 en el kernel de Linux versiones hasta 5.13.13 • https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=9e445093e523f3277081314c864f708fd4bd34aa • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 1

CVE-2021-38198

https://notcve.org/view.php?id=CVE-2021-38198

08 Aug 2021 — arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault. El archivo arch/x86/kvm/mmu/paging_tmpl.h en el kernel de Linux versiones anteriores a 5.12.11, computa incorrectamente los permisos de acceso de una página sombra, conllevando a un fallo de página de protección de invitados • https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.11 •

CVSS: 6.5EPSS: 0%CPEs: 9EXPL: 0

CVE-2021-38199

https://notcve.org/view.php?id=CVE-2021-38199

08 Aug 2021 — fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arranging for those servers to be unreachable during trunking detection. El archivo fs/nfs/nfs4client.c en el kernel de Linux versiones anteriores a 5.13.4, presenta un ordenamiento incorrecto de la configuración de la conexión, que permite a operadores de servidores NFSv4 remotos causar una denegación de servicio (c... • https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4 •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-38200

https://notcve.org/view.php?id=CVE-2021-38200

08 Aug 2021 — arch/powerpc/perf/core-book3s.c in the Linux kernel before 5.12.13, on systems with perf_event_paranoid=-1 and no specific PMU driver support registered, allows local users to cause a denial of service (perf_instruction_pointer NULL pointer dereference and OOPS) via a "perf record" command. El archivo arch/powerpc/perf/core-book3s.c en el kernel de Linux versiones anteriores a 5.12.13, en sistemas con perf_event_paranoid=-1 y sin soporte específico de controlador PMU registrado, permite a usuarios locales c... • https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.13 • CWE-476: NULL Pointer Dereference •

CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0

CVE-2021-38202

https://notcve.org/view.php?id=CVE-2021-38202

08 Aug 2021 — fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd. El archivo fs/nfsd/trace.h en el kernel de Linux versiones anteriores a 5.13.4, podría permitir a atacantes remotos causar una denegación de servicio (lectura fuera de los límites en strlen) mediante el envío de tráfico NFS cuando el marco de eventos de rastreo se está usando para nfsd • https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4 • CWE-125: Out-of-bounds Read •

CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 1

CVE-2021-38203

https://notcve.org/view.php?id=CVE-2021-38203

08 Aug 2021 — btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trigger allocation of new system chunks during times when there is a shortage of free space in the system space_info. btrfs en el kernel de Linux versiones anteriores a 5.13.4, permite a atacantes causar una denegación de servicio (bloqueo) por medio de procesos que desencadenan la asignación de nuevos trozos del sistema durante los momentos en que hay una escasez de espacio libre en el space_... • https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4 • CWE-667: Improper Locking •

CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-38204

https://notcve.org/view.php?id=CVE-2021-38204

08 Aug 2021 — drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations. El archivo drivers/usb/host/max3421-hcd.c en el kernel de Linux versiones anteriores a 5.13.6, permite a atacantes físicamente próximos causar una denegación de servicio (uso de memoria previamente liberada y pánico) al eliminar un dispositivo USB MAX-3421 en determinadas situaciones • https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.6 • CWE-416: Use After Free •