linux linux kernel 5.0.21 vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.

Linux Linux Kernel 5.0.21

6.8

CVSSv2

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.

Linux Linux Kernel 5.0.21

7.1

CVSSv2

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.

Linux Linux Kernel 5.0.21

6.8

CVSSv2

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).

Linux Linux Kernel 5.0.21

4.4

CVSSv2

In the Linux kernel prior to 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call, aka CID-345c0dbf3a...

Linux Linux Kernel 5.0.21 Opensuse Leap 15.1 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0

7.1

CVSSv2

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __...

Linux Linux Kernel 5.0.21 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Debian Debian Linux 9.0 Netapp Active Iq Unified Manager Netapp Data Availability Services -Netapp Hci Management Node -Netapp Solidfire -Netapp Steelstore Cloud Integrated Storage -Netapp Aff A700s Firmware -Netapp Fas8300 Firmware -Netapp Fas8700 Firmware -Netapp Aff A400 Firmware -Netapp H610s Firmware -

4.6

CVSSv2

A flaw was found in the Linux kernel in versions prior to 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.

Linux Linux Kernel Linux Linux Kernel 5.9.0 Debian Debian Linux 9.0

7.2

CVSSv2

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VG...

Linux Linux Kernel Linux Linux Kernel 5.8.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0

5

CVSSv2

In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).

Linux Linux Kernel 5.4.0

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook