Linux suffers from broken locking in TIOCSPGRP that can lead to a corrupted refcount.
3d16d56ff43c2ab3355f19116f22e1a94fc89347899d1d2c15556ab0e4b4191bLinux suffers from an io_uring use-after-free vulnerability due to broken unix GC interaction.
f69e0977a025727662a99855b4620c72daf61a181fc942af121b5a2aba667456Linux suffers from a small remote binary information leak in DCCP.
8f509db352a5daf100520971c2666cea99bc2b733614a6fbd107c438f44733beLinux suffers from two seccomp bugs with a PT_SUSPEND_SECCOMP permission bypass and ptracer death race condition.
6d7f253f354c0c71a5692bbeb6bcd2a20b50e96fc05afeda0286131716d7b406Linux suffers from an anon_vma use-after-free vulnerability through the bogus merge of VMAs caused by double-reuse of leaf anon_vma because of ->degree misinterpretation.
e27e13af66dddafc7e4588c3b561b058fe6859b4fbc060de1741e0003a7d5b45Linux suffers from two bugs in PT_SUSPEND_SECCOMP. One allows for permission bypass and the other relates to a ptracer death race.
090e7e5a723be850497afe230306c956241cce0eb429877bf07e8c0f06eb2a40Linux suffers from a vulnerability where FUSE allows use-after-free reads of write() buffers, allowing theft of (partial) /etc/shadow hashes.
2013a523f6140f5f94778f15578c0f1d52f0a0bddd81e46cc48963fbe8fd4efbLinux suffers from a garbage collection memory corruption vulnerability by resurrecting a file reference through RCU.
638d1db3f45bcd59a8ce424b7eb6551bbe0ff49ecd4eb9c767f096560f4687deLinux suffers from a use-after-free read in the SELinux handler for PTRACE_TRACEME.
796440de4a29bc2603d127196092fc9ccdd7e9044bbb208b4660cc96ceeb0dcdLinux suffers from a privilege escalation vulnerability via io_uring offload of sendmsg() onto kernel thread with kernel creds.
a834b29ddf4d2217f0c133698262209db2f3b93925e28fd750acde84f14c06ebLinux suffers from use-after-free read vulnerabilities in show_numa_stats().
7daf0340da4a54780b2816f43fc842a167e5ce5eecd0e0c90c87101a262a8f9eLinux suffers from broken permission and object lifetime handling for PTRACE_TRACEME.
30dafcd01fe3416a51e40e4a4f49ab60f981e89f93b9635b6199d3e4fa21fde9Linux suffers from a use-after-free via a race condition between modify_ldt() and #BR exception.
1fcbfa390531a70742295db73f9e7ff8f089236459ea40c9adc0d8c41303b3d3Linux suffers from a missing locking between ELF coredump code and userfaultfd VMA modification.
673a7d5b5c8c34c1c31d9a3eff1b04dbcf78b701cc9cca3e53ef0c155170313fLinux suffers from a page->_refcount overflow via FUSE with ~140GiB RAM usage.
8f223059c2e0c5c532eddc4777ac58f752854b9d67abeac1f06d8d9bf6855b94Linux suffers from out-of-bounds read and write vulnerabilities in the SNMP NAT module.
7bd49b3bb3d086c38ebc75bb8575f700166986bda831d3c8b3ef390d3ddb262fLinux suffers from an issue with systemd where chown_one() can dereference symlinks.
d697c36e79f99a67f9cd338b7bd29e048c68c6bb76813a6a4825722f969d23a4Linux suffers from a semi-arbitrary task stack read on ARM64 (and x86) via /proc/$pid/stack.
aa57cf6a492d7f45505fa3498cb8e656f5d02f443b0cde3a3cb505708affcfc3Linux suffers from an integer overflow vulnerability in create_elf_tables(). Multiple exploits provided.
96f76be0c1dab33a40b6145fd293ceab661f631350fcf639a1e4bdb1faedbb92Linux suffers from a VMA use-after-free vulnerability via a buggy vmacache_flush_all() fastpath.
e61f826cfebf3e7bf6eb9726e31779f1707a0644cc3e2a4e3c0865759d272aceLinux suffers from an arbitrary kernel read into dmesg via a missing address check in the segfault handler.
d3543609cf07f5bc3c6ff63fec8e66a77587ae2ca18d384c4afa15317c5fc42fLinux suffers from an insufficient shootdown for paging-structure caches.
32e5a4bd6f757fe452ac7e750d0af567a328b2a378460854b5ae256e468c4523Linux suffers from a reiserfs listxattr_filler() heap overflow vulnerability.
bda8cff2fd8a8c683d0b06a45887982f218af840ef2b2e66113c85ebc43d76ebLinux suffers from a 4-byte information leak via an uninitialized struct field in the compat adjtimex syscall.
50d39995adad3a015a3b94c0d7b5e9f1f194e700f189b736aefca07019347f73Sudo's get_process_ttyname() on Linux suffers from a race condition that allows for root privilege escalation.
fedac891bbdaf97f55757b635d5ae075843da48925d762d5149a49ade19918cdMcAfee Virus Scan Enterprise for Linux suffers from a remote code execution vulnerability.
26d7834cf5815b1060880e6f39aced196e9baa8ba2abaefb8044358b1c90a16b
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed