linux linux kernel 4.18 vulnerabilities and exploits

(subscribe to this query)

In the Linux kernel, the following vulnerability has been resolved: uio: Fix use-after-free in uio_open core-1 core-2 ------------------------------------------------------- uio_unregister_device uio_open idev = idr_find() device_unregister(&idev->dev) put_device(&idev...

Linux Linux Kernel 4.18 Linux Linux Kernel

An issue exists in the Linux kernel 4.18 up to and including 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a ki...

Linux Linux Kernel

A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cau...

An issue exists in fs/xfs/xfs_super.c in the Linux kernel prior to 4.18. A use after free exists, related to xfs_fs_fill_super failure.

Linux Linux Kernel

An issue exists in the Linux kernel 4.18 up to and including 5.10.16, as used by Xen. The backend allocation (aka be-alloc) mode of the drm_xen_front drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry.

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33

A flaw was found in the way Linux kernel KVM hypervisor prior to 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potenti...

Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 16.04 Debian Debian Linux 8.0 Linux Linux Kernel

In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x prior to 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.

Linux Linux Kernel Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server Tus 7.6 Redhat Enterprise Linux Server Eus 7.6 Redhat Enterprise Linux Server Aus 7.6 Redhat Enterprise Linux Server 7.6

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.

Linux Linux Kernel Debian Debian Linux 8.0 Redhat Enterprise Linux 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04 Netapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Active Iq Unified Manager For Vmware Vsphere Netapp Cn1610 Firmware -

KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can caus...

Linux Linux Kernel -Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Opensuse Leap 15.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook