mohamed ghannam vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

The KEYS subsystem in the Linux kernel prior to 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the "negative" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified othe...

Linux Linux Kernel

5.5

CVSSv3

The KEYS subsystem in the Linux kernel up to and including 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other im...

Linux Linux Kernel

7.8

CVSSv3

The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel prior to 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other i...

Linux Linux Kernel Debian Debian Linux 7.0 Suse Linux Enterprise Server 11 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 17.10

6.6

CVSSv3

The usb_get_bos_descriptor function in drivers/usb/core/config.c in the Linux kernel prior to 4.13.10 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.

Linux Linux Kernel

6.6

CVSSv3

The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel prior to 4.13.11 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.

Linux Linux Kernel

6.6

CVSSv3

The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel up to and including 4.13.11 allows local users to cause a denial of service (improper error handling and system crash) or possibly have unspecified other impact via a crafted USB device.

Linux Linux Kernel

6.6

CVSSv3

drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel up to and including 4.13.11 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device, related to a missing warm-start c...

Linux Linux Kernel

6.5

CVSSv3

The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel prior to 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page referenc...

Linux Linux Kernel

3.3

CVSSv3

The KEYS subsystem in the Linux kernel prior to 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add ke...

Linux Linux Kernel

7

CVSSv3

In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blk_mq_complete_request. This could lead to local escalation of privilege. Product: Android. Versions: Android kernel. An...

Google Android -

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook