baseboard management controller firmware vulnerabilities and exploits

(subscribe to this query)

In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel up to and including 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly...

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Fas\\/aff Baseboard Management Controller -

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

Linux Linux Kernel Netapp Hci Baseboard Management Controller H300s Netapp Hci Baseboard Management Controller H500s Netapp Hci Baseboard Management Controller H700s Netapp Hci Baseboard Management Controller H410s

An issue exists in the Linux kernel 5.9.x up to and including 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a...

Xen Xen -Linux Linux Kernel Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller Firmware -

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel up to and including 5.17.1 has a double free.

Linux Linux Kernel Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Hci Baseboard Management Controller H300s Netapp Hci Baseboard Management Controller H500s Netapp Hci Baseboard Management Controller H700s Netapp Hci Baseboard Management Controller H300e Netapp Hci Baseboard Management Controller H500e Netapp Hci Baseboard Management Controller H700e Netapp Hci Baseboard Management Controller H410s Netapp Hci Baseboard Management Controller H410c

usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel prior to 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.

Linux Linux Kernel Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Hci Storage Nodes -Netapp Aff A700s -Netapp Active Iq Unified Manager -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Solidfire Baseboard Management Controller -Netapp Hci Baseboard Management Controller H300s Netapp Hci Baseboard Management Controller H500s Netapp Hci Baseboard Management Controller H700s Netapp Hci Baseboard Management Controller H410s Netapp Hci Baseboard Management Controller H410c Netapp Hci Baseboard Management Controller H610c Netapp Hci Baseboard Management Controller H610s Netapp Hci Baseboard Management Controller H615c

1 Article

An issue exists in the Linux kernel up to and including 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged us...

Linux Linux Kernel Debian Debian Linux 9.0 Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller Firmware -

9 Github repositories

An issue exists in the Linux kernel up to and including 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of se...

Linux Linux Kernel 5.12 Linux Linux Kernel Debian Debian Linux 9.0 Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller Firmware -

An issue exists in the Linux kernel up to and including 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308.

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller Firmware -

There is a use-after-free vulnerability in the Linux kernel up to and including 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.

Linux Linux Kernel Debian Debian Linux 8.0 Opensuse Leap 15.1 Netapp Cloud Backup -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller -Broadcom Brocade Fabric Operating System Firmware -Netapp Hci Baseboard Management Controller H410c Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 14.04

The ASPEED ast2400 and ast2500 Baseband Management Controller (BMC) hardware and firmware implement Advanced High-performance Bus (AHB) bridges, which allow arbitrary read and write access to the BMC's physical address space from the host (or from the network in unusual case...

Aspeedtech Ast2400 Firmware Aspeedtech Ast2500 Firmware Netapp Fas\\/aff Baseboard Management Controller

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook