linux linux kernel 5.14 vulnerabilities and exploits

(subscribe to this query)

A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayFS. This flaw allows a local user to gain access to hidden files that should not be accessible.

Linux Linux Kernel 5.14 Linux Linux Kernel

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field...

Linux Linux Kernel 5.14 Linux Linux Kernel Redhat Enterprise Linux 7.0 Debian Debian Linux 9.0

1 Github repository

A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.

Linux Linux Kernel 5.14 Linux Linux Kernel Redhat Enterprise Linux 8.0 Debian Debian Linux 9.0

A lack of CPU resource in the Linux kernel tracing module functionality in versions before 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing ...

Linux Linux Kernel 5.14 Linux Linux Kernel Redhat Enterprise Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local malicious user to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest ...

Linux Linux Kernel 5.14 Linux Linux Kernel 5.17 Linux Linux Kernel Fedoraproject Fedora 34 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Oracle Communications Cloud Native Core Binding Support Function 22.1.3 Oracle Communications Cloud Native Core Policy 22.2.0 Oracle Communications Cloud Native Core Network Exposure Function 22.1.1

A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout ...

Linux Linux Kernel 5.14 Linux Linux Kernel Redhat Virtualization 4.0 Redhat Enterprise Linux 8.0 Netapp Hci Baseboard Management Controller H300s Netapp Hci Baseboard Management Controller H500s Netapp Hci Baseboard Management Controller H700s Netapp Hci Baseboard Management Controller H300e Netapp Hci Baseboard Management Controller H500e Netapp Hci Baseboard Management Controller H700e Netapp Hci Baseboard Management Controller H410s

3 Github repositories

A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions before 5.14 rc1.

Linux Linux Kernel Redhat Enterprise Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 11.0

kernel/ucount.c in the Linux kernel 5.14 up to and including 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace.

Linux Linux Kernel Netapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Fedoraproject Fedora 34 Fedoraproject Fedora 35

1 Github repository

This vulnerability allows local malicious users to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exist...

Linux Linux Kernel Netapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" fiel...

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook