linux linux kernel 5.9.1 vulnerabilities and exploits

(subscribe to this query)

5.8

CVSSv2

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Linux Linux Kernel 5.9.0 Linux Linux Kernel Linux Linux Kernel 5.9.1

1 Github repository

4.9

CVSSv2

An issue exists in the Linux kernel up to and including 5.9.1, as used with Xen up to and including 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events to dom0, aka CID-e99502f76271.

Linux Linux Kernel 5.10 Linux Linux Kernel Debian Debian Linux 9.0 Opensuse Leap 15.1 Opensuse Leap 15.2 Xen Xen

1.9

CVSSv2

A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidential...

Linux Linux Kernel 5.10 Linux Linux Kernel Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Debian Debian Linux 9.0 Starwindsoftware Starwind Virtual San V8

6.1

CVSSv2

A slab-out-of-bounds read in fbcon in the Linux kernel prior to 5.9.7 could be used by local malicious users to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulati...

Linux Linux Kernel Debian Debian Linux 9.0

6.4

CVSSv2

In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux...

Linux Linux Kernel

1 Github repository

4.6

CVSSv2

A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidenti...

Linux Linux Kernel Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Debian Debian Linux 9.0

4.9

CVSSv2

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.

Linux Linux Kernel 5.10 Linux Linux Kernel Debian Debian Linux 9.0 Starwindsoftware Starwind San \\& Nas V8r12 Starwindsoftware Command Center -Starwindsoftware Starwind Virtual San V8 Starwindsoftware Starwind Hyperconverged Appliance -

1 Github repository

4.9

CVSSv2

An issue exists in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel up to and including 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs because of an invalid free when the line ...

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 9.0

4.7

CVSSv2

An issue exists in the Linux kernel up to and including 5.9.1, as used with Xen up to and including 4.14.x. drivers/xen/events/events_base.c allows event-channel removal during the event-handling loop (a race condition). This can cause a use-after-free or NULL pointer dereference...

Linux Linux Kernel Fedoraproject Fedora 31 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 9.0

7.2

CVSSv2

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase...

Linux Linux Kernel Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 5.0 Redhat Enterprise Linux 8.0 Redhat Openshift Container Platform 4.5 Redhat Openshift Container Platform 4.6 Redhat Openshift Container Platform 4.4

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook