linux linux kernel 5.6 vulnerabilities and exploits

(subscribe to this query)

A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local malicious user to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to c...

Linux Linux Kernel Linux Linux Kernel 5.6

The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.

Linux Linux Kernel Linux Linux Kernel 5.6 Debian Debian Linux 10.0

The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel prior to 3.2.1 allows remote malicious users to cause a denial of service (divide-by-zero error and panic) via IGMP packets.

Linux Linux Kernel Redhat Enterprise Linux Eus 5.6

1 EDB exploit

The bluetooth subsystem in the Linux kernel prior to 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockop...

Linux Linux Kernel 3.0 Linux Linux Kernel Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Eus 5.6 Redhat Enterprise Linux Aus 5.6

The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel prior to 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRY_V1 ioctl call.

Linux Linux Kernel 2.6.38 Linux Linux Kernel Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Server Aus 5.6 Redhat Enterprise Linux Server Eus 5.6

The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel prior to 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.

Linux Linux Kernel 3.3 Linux Linux Kernel 3.3.2 Linux Linux Kernel 3.3.3 Linux Linux Kernel Linux Linux Kernel 3.3.4 Linux Linux Kernel 3.3.5 Linux Linux Kernel 3.3.1 Novell Suse Linux Enterprise Server 10.0 Redhat Enterprise Linux 5 Redhat Enterprise Linux Server Aus 6.2 Redhat Enterprise Linux Server Eus 6.2.z Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Server Eus 6.1.z Redhat Enterprise Linux Eus 5.6.z Redhat Enterprise Linux Long Life 5.6

The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementation in the Linux kernel prior to 2.6.38 does not properly handle packets for a CLOSED endpoint, which allows remote malicious users to cause a denial of service (...

Linux Linux Kernel Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Eus 5.6 Redhat Enterprise Linux Aus 5.6

The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel prior to 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink mess...

Linux Linux Kernel Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Eus 5.6 Redhat Enterprise Linux Aus 5.6

The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel prior to 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to ...

Linux Linux Kernel Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Server Aus 5.6 Redhat Enterprise Linux Eus 5.6

Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel prior to 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large value of a certain structure me...

Linux Linux Kernel Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Server Aus 5.6 Redhat Enterprise Linux Eus 5.6

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook