https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:37:21 +0000 https://vulnerability.circl.lu/vuln/cve-2015-1420 <p>Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.</p> <p>Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.</p> https://vulnerability.circl.lu/vuln/cve-2015-1420 https://vulnerability.circl.lu/vuln/usn-2663-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Alexandre Oliva reported a race condition flaw in the btrfs file system&#39;s handling of extended attributes (xattrs). A local attacker could exploit this flaw to bypass ACLs and potentially escalate privileges. (CVE-2014-9710)</p> <p>A race condition was discovered in the Linux kernel&#39;s file_handle size verification. A local user could exploit this flaw to read potentially sensative memory locations. (CVE-2015-1420)</p> <p>A underflow error was discovered in the Linux kernel&#39;s Ozmo Devices USB over WiFi host controller driver. A remote attacker could exploit this flaw to cause a denial of service (system crash) or potentially execute arbitrary code via a specially crafted packet. (CVE-2015-4001)</p> <p>A bounds check error was discovered in the Linux kernel&#39;s Ozmo Devices USB over WiFi host controller driver. A remote attacker could exploit this flaw to cause a denial of service (system crash) or potentially execute arbitrary code via a specially crafted packet. (CVE-2015-4002)</p> <p>A division by zero error was discovered in the Linux kernel&#39;s Ozmo Devices USB over WiFi host controller driver. A remote attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2015-4003)</p> <p>Carl H Lunde discovered missing consistency checks in the Linux kernel&#39;s UDF file system (CONFIG_UDF_FS). A local attacker could exploit this flaw to cause a denial of service (system crash) by using a corrupted file system image. (CVE-2015-4167)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Alexandre Oliva reported a race condition flaw in the btrfs file system&#39;s handling of extended attributes (xattrs). A local attacker could exploit this flaw to bypass ACLs and potentially escalate privileges. (CVE-2014-9710)</p> <p>A race condition was discovered in the Linux kernel&#39;s file_handle size verification. A local user could exploit this flaw to read potentially sensative memory locations. (CVE-2015-1420)</p> <p>A underflow error was discovered in the Linux kernel&#39;s Ozmo Devices USB over WiFi host controller driver. A remote attacker could exploit this flaw to cause a denial of service (system crash) or potentially execute arbitrary code via a specially crafted packet. (CVE-2015-4001)</p> <p>A bounds check error was discovered in the Linux kernel&#39;s Ozmo Devices USB over WiFi host controller driver. A remote attacker could exploit this flaw to cause a denial of service (system crash) or potentially execute arbitrary code via a specially crafted packet. (CVE-2015-4002)</p> <p>A division by zero error was discovered in the Linux kernel&#39;s Ozmo Devices USB over WiFi host controller driver. A remote attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2015-4003)</p> <p>Carl H Lunde discovered missing consistency checks in the Linux kernel&#39;s UDF file system (CONFIG_UDF_FS). A local attacker could exploit this flaw to cause a denial of service (system crash) by using a corrupted file system image. (CVE-2015-4167)</p> https://vulnerability.circl.lu/vuln/usn-2663-1