netapp h410c - vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. Thi...

Linux Linux Kernel Netapp H300s -Netapp H500s -Netapp H700s -Netapp H410s -Netapp H410c -

1 Github repository

7.5

CVSSv3

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An ...

Linux Linux Kernel Netapp H300s -Netapp H500s -Netapp H700s -Netapp H410s -Netapp H410c -

7

CVSSv3

A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, pa...

Linux Linux Kernel Netapp H300s -Netapp H500s -Netapp H700s -Netapp H410s -Netapp H410c -

7.1

CVSSv3

A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local malicious user to crash the system, and could even lead to a kernel information leak problem.

Linux Linux Kernel Netapp H300s -Netapp H500s -Netapp H700s -Netapp H410s -Netapp H410c -

7

CVSSv3

An issue exists in the Linux kernel prior to 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.

Linux Linux Kernel Netapp H300s -Netapp H500s -Netapp H700s -Netapp H410s -Netapp H410c -

7

CVSSv3

An issue exists in the Linux kernel prior to 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.

Linux Linux Kernel Netapp H300s -Netapp H500s -Netapp H700s -Netapp H410s -Netapp H410c -

7.1

CVSSv3

An issue exists in the Linux kernel prior to 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.

Linux Linux Kernel Netapp H300s -Netapp H500s -Netapp H700s -Netapp H410s -Netapp H410c -

7

CVSSv3

do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel up to and including 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).

Linux Linux Kernel Netapp H300s -Netapp H500s -Netapp H700s -Netapp H410s -Netapp H410c -Debian Debian Linux 10.0

7

CVSSv3

A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.

Linux Linux Kernel Netapp H300s -Netapp H500s -Netapp H700s -Netapp H410s -Netapp H410c -Debian Debian Linux 10.0 Debian Debian Linux 12.0

7.8

CVSSv3

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

Linux Linux Kernel Debian Debian Linux 11.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Netapp H300s -Netapp H500s -Netapp H700s -Netapp H410s -Netapp H410c -

2 Github repositories

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook