CVE-2020-29374 vulnerabilities and exploits

(subscribe to this query)

An issue exists in the Linux kernel prior to 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write acce...

Linux Linux Kernel Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp 500f Firmware -Netapp A250 Firmware -Netapp H410c Firmware -Netapp Solidfire \\& Hci Management Node -Netapp Hci Compute Node Bios -Netapp Solidfire \\& Hci Storage Node -

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel prior to 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds me...

Linux Linux Kernel Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Debian Debian Linux 9.0

The Linux kernel prior to 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.

Linux Linux Kernel

kernel/bpf/verifier.c in the Linux kernel up to and including 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads....

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0

An issue exists in the Linux kernel up to and including 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifi...

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0

1 Github repository

In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel up to and including 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6.

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0 Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Aff A250 Firmware -Netapp Aff 500f Firmware -

A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Netapp Cloud Backup -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller Firmware -Netapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -

A race condition exists in get_old_root in fs/btrfs/ctree.c in the Linux kernel up to and including 5.11.8. It allows malicious users to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0 Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Aff A250 Firmware -Netapp Fas 500f Firmware -

A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information.

Linux Linux Kernel 5.15 Linux Linux Kernel Netapp Element Software -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp E-series Santricity Os Controller Netapp Bootstrap Os -Netapp A700s Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Oracle Communications Cloud Native Core Binding Support Function 22.1.3 Oracle Communications Cloud Native Core Policy 22.2.0 Oracle Communications Cloud Native Core Network Exposure Function 22.1.1

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook