Vulnerability-Lookup

SUSE-SU-2022:2103-1

Vulnerability from csaf_suse - Published: 2022-06-16 13:20 - Updated: 2022-06-16 13:20

Summary

Security update for the Linux Kernel

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel

Description of the patch: The SUSE Linux Enterprise 15 kernel was updated. The following security bugs were fixed: - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) - CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) - CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) - CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) - CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) - CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266) - CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577) - CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table. (bnc#1055710) - CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507). - CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063). - CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1197219). - CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742). - CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c. (bnc#1191958) - CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call (bnc#1187055). - CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c. (bnc#1198516) - CVE-2021-20292: Fixed object validation prior to performing operations on the object in nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723). - CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bnc#1197343) - CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144) - CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space. (bsc#1200143) - CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb. (bsc#1199426) - CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605) - CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505). - CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426). - CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012). - CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system (bnc#1191647). - CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, where a reference count is mishandled (bnc#1172456). The following non-security bugs were fixed: - btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (bsc#1199399). - btrfs: tree-checker: fix incorrect printk format (bsc#1200249). - lib: dimlib: fix help text typos (bsc#1198776). - lib: dimlib: make DIMLIB a hidden symbol (bsc#1198776). - linux/dim: Add completions count to dim_sample (bsc#1198776). - linux/dim: Fix -Wunused-const-variable warnings (bsc#1198776). - linux/dim: Fix overflow in dim calculation (bsc#1198776). - linux/dim: Implement RDMA adaptive moderation (DIM) (bsc#1198776). - linux/dim: Move implementation to .c files (bsc#1198776). - linux/dim: Move logic to dim.h (bsc#1198776). - linux/dim: Remove 'net' prefix from internal DIM members (bsc#1198776). - linux/dim: Rename externally exposed macros (bsc#1198776). - linux/dim: Rename externally used net_dim members (bsc#1198776). - linux/dim: Rename net_dim_sample() to net_dim_update_sample() (bsc#1198776). - net: ena: A typo fix in the file ena_com.h (bsc#1198776). - net: ena: Add capabilities field with support for ENI stats capability (bsc#1198776). - net: ena: add device distinct log prefix to files (bsc#1198776). - net: ena: Add first_interrupt field to napi struct (bsc#1198776). - net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (bsc#1198776). - net: ena: add jiffies of last napi call to stats (bsc#1198776). - net: ena: add missing ethtool TX timestamping indication (bsc#1198776). - net: ena: add reserved PCI device ID (bsc#1198776). - net: ena: add support for reporting of packet drops (bsc#1198776). - net: ena: add support for the rx offset feature (bsc#1198776). - net: ena: add support for traffic mirroring (bsc#1198776). - net: ena: add unmask interrupts statistics to ethtool (bsc#1198776). - net: ena: aggregate stats increase into a function (bsc#1198776). - net: ena: allow setting the hash function without changing the key (bsc#1198776). - net: ena: avoid memory access violation by validating req_id properly (bsc#1198776). - net: ena: avoid unnecessary admin command when RSS function set fails (bsc#1198776). - net: ena: avoid unnecessary rearming of interrupt vector when busy-polling (bsc#1198776). - net: ena: Capitalize all log strings and improve code readability (bsc#1198776). - net: ena: change default RSS hash function to Toeplitz (bsc#1198776). - net: ena: Change ENI stats support check to use capabilities field (bsc#1198776). - net: ena: Change license into format to SPDX in all files (bsc#1198776). - net: ena: Change log message to netif/dev function (bsc#1198776). - net: ena: change num_queues to num_io_queues for clarity and consistency (bsc#1198776). - net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1198776). - net: ena: Change RSS related macros and variables names (bsc#1198776). - net: ena: Change the name of bad_csum variable (bsc#1198776). - net: ena: changes to RSS hash key allocation (bsc#1198776). - net: ena: clean up indentation issue (bsc#1198776). - net: ena: cosmetic: change ena_com_stats_admin stats to u64 (bsc#1198776). - net: ena: cosmetic: code reorderings (bsc#1198776). - net: ena: cosmetic: extract code to ena_indirection_table_set() (bsc#1198776). - net: ena: cosmetic: fix line break issues (bsc#1198776). - net: ena: cosmetic: fix spacing issues (bsc#1198776). - net: ena: cosmetic: fix spelling and grammar mistakes in comments (bsc#1198776). - net: ena: cosmetic: minor code changes (bsc#1198776). - net: ena: cosmetic: remove unnecessary code (bsc#1198776). - net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h macros (bsc#1198776). - net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation() (bsc#1198776). - net: ena: cosmetic: set queue sizes to u32 for consistency (bsc#1198776). - net: ena: do not wake up tx queue when down (bsc#1198776). - net: ena: drop superfluous prototype (bsc#1198776). - net: ena: ena-com.c: prevent NULL pointer dereference (bsc#1198776). - net: ena: enable support of rss hash key and function changes (bsc#1198776). - net: ena: enable the interrupt_moderation in driver_supported_features (bsc#1198776). - net: ena: ethtool: Add new device statistics (bsc#1198776). - net: ena: ethtool: clean up minor indentation issue (bsc#1198776). - net: ena: ethtool: convert stat_offset to 64 bit resolution (bsc#1198776). - net: ena: ethtool: get_channels: use combined only (bsc#1198776). - net: ena: ethtool: remove redundant non-zero check on rc (bsc#1198776). - net: ena: ethtool: support set_channels callback (bsc#1198776). - net: ena: ethtool: use correct value for crc32 hash (bsc#1198776). - net: ena: Fix all static chekers' warnings (bsc#1198776). - net: ena: Fix build warning in ena_xdp_set() (bsc#1198776). - net: ena: fix coding style nits (bsc#1198776). - net: ena: fix continuous keep-alive resets (bsc#1198776). - net: ena: fix corruption of dev_idx_to_host_tbl (bsc#1198776). - net: ena: fix default tx interrupt moderation interval (bsc#1198776). - net: ena: fix ena_com_comp_status_to_errno() return value (bsc#1198776). - net: ena: Fix error handling when calculating max IO queues number (bsc#1198776). - net: ena: fix error returning in ena_com_get_hash_function() (bsc#1198776). - net: ena: fix inaccurate print type (bsc#1198776). - net: ena: fix incorrect default RSS key (bsc#1198776). - net: ena: fix incorrect setting of the number of msix vectors (bsc#1198776). - net: ena: fix incorrect update of intr_delay_resolution (bsc#1198776). - net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (bsc#1198776). - net: ena: fix issues in setting interrupt moderation params in ethtool (bsc#1198776). - net: ena: fix napi handler misbehavior when the napi budget is zero (bsc#1198776). - net: ena: fix packet's addresses for rx_offset feature (bsc#1198776). - net: ena: fix potential crash when rxfh key is NULL (bsc#1198776). - net: ena: fix request of incorrect number of IRQ vectors (bsc#1198776). - net: ena: fix retrieval of nonadaptive interrupt moderation intervals (bsc#1198776). - net: ena: fix update of interrupt moderation register (bsc#1198776). - net: ena: fix uses of round_jiffies() (bsc#1198776). - net: ena: Fix using plain integer as NULL pointer in ena_init_napi_in_range (bsc#1198776). - net: ena: Fix wrong rx request id by resetting device (bsc#1198776). - net: ena: handle bad request id in ena_netdev (bsc#1198776). - net: ena: Improve error logging in driver (bsc#1198776). - net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (bsc#1198776). - net: ena: make ethtool -l show correct max number of queues (bsc#1198776). - net: ena: Make missed_tx stat incremental (bsc#1198776). - net: ena: make symbol 'ena_alloc_map_page' static (bsc#1198776). - net: ena: move llq configuration from ena_probe to ena_device_init() (bsc#1198776). - net: ena: Move reset completion print to the reset function (bsc#1198776). - net: ena: multiple queue creation related cleanups (bsc#1198776). - net: ena: Prevent reset after device destruction (bsc#1198776). - net: ena: re-organize code to improve readability (bsc#1198776). - net: ena: reduce driver load time (bsc#1198776). - net: ena: reimplement set/get_coalesce() (bsc#1198776). - net: ena: remove all old adaptive rx interrupt moderation code from ena_com (bsc#1198776). - net: ena: remove code duplication in ena_com_update_nonadaptive_moderation_interval _*() (bsc#1198776). - net: ena: remove code that does nothing (bsc#1198776). - net: ena: Remove ena_calc_queue_size_ctx struct (bsc#1198776). - net: ena: remove ena_restore_ethtool_params() and relevant fields (bsc#1198776). - net: ena: remove extra words from comments (bsc#1198776). - net: ena: Remove module param and change message severity (bsc#1198776). - net: ena: remove old adaptive interrupt moderation code from ena_netdev (bsc#1198776). - net: ena: remove redundant print of number of queues (bsc#1198776). - net: ena: Remove redundant print of placement policy (bsc#1198776). - net: ena: Remove redundant return code check (bsc#1198776). - net: ena: remove set but not used variable 'hash_key' (bsc#1198776). - net: ena: Remove unused code (bsc#1198776). - net: ena: rename ena_com_free_desc to make API more uniform (bsc#1198776). - net: ena: rss: do not allocate key when not supported (bsc#1198776). - net: ena: rss: fix failure to get indirection table (bsc#1198776). - net: ena: rss: store hash function as values and not bits (bsc#1198776). - net: ena: Select DIMLIB for ENA_ETHERNET (bsc#1198776). - net: ena: set initial DMA width to avoid intel iommu issue (bsc#1198776). - net: ena: simplify ena_com_update_intr_delay_resolution() (bsc#1198776). - net: ena: store values in their appropriate variables types (bsc#1198776). - net: ena: support new LLQ acceleration mode (bsc#1198776). - net: ena: switch to dim algorithm for rx adaptive interrupt moderation (bsc#1198776). - net: ena: use constant value for net_device allocation (bsc#1198776). - net: ena: Use dev_alloc() in RX buffer allocation (bsc#1198776). - net: ena: use explicit variable size for clarity (bsc#1198776). - net: ena: use SHUTDOWN as reset reason when closing interface (bsc#1198776). - net: mana: Add counter for packet dropped by XDP (bsc#1195651). - net: mana: Add counter for XDP_TX (bsc#1195651). - net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651). - net: mana: Remove unnecessary check of cqe_type in mana_process_rx_cqe() (bsc#1195651). - net: mana: Reuse XDP dropped page (bsc#1195651). - net: update net_dim documentation after rename (bsc#1198776). - PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (bsc#1199314). - scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() (bsc#1028340 bsc#1198825). - SUNRPC: change locking for xs_swap_enable/disable (bsc#1196367). - x86/pm: Save the MSR validity status at context setup (bsc#1114648). - x86/speculation: Restore speculation related MSRs during S3 resume (bsc#1114648).

Patchnames: SUSE-2022-2103,SUSE-SLE-Module-Live-Patching-15-2022-2103,SUSE-SLE-Product-HA-15-2022-2103,SUSE-SLE-Product-HPC-15-2022-2103,SUSE-SLE-Product-SLES-15-2022-2103,SUSE-SLE-Product-SLES_SAP-15-2022-2103

CVE-2017-13695

4 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 103 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:cluster-md-kmp-default-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:cluster-md-kmp-default-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:cluster-md-kmp-default-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:cluster-md-kmp-default-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:dlm-kmp-default-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:dlm-kmp-default-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:dlm-kmp-default-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:dlm-kmp-default-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:gfs2-kmp-default-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:gfs2-kmp-default-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:gfs2-kmp-default-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:gfs2-kmp-default-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:ocfs2-kmp-default-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:ocfs2-kmp-default-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:ocfs2-kmp-default-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15:ocfs2-kmp-default-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-default-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-default-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-default-base-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-default-base-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-default-devel-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-default-devel-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-devel-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-docs-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-macros-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-obs-build-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-obs-build-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-source-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-syms-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-syms-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-vanilla-base-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:kernel-vanilla-base-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-default-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-default-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-default-base-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-default-base-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-default-devel-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-default-devel-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-devel-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-docs-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-macros-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-obs-build-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-obs-build-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-source-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-syms-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-syms-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-vanilla-base-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-vanilla-base-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15:kernel-default-livepatch-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15:kernel-default-livepatch-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150000_150_92-default-1-150000.1.3.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150000_150_92-default-1-150000.1.3.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-base-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-base-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-base-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-base-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-devel-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-devel-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-devel-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-devel-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-default-man-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-devel-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-docs-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-macros-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-obs-build-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-obs-build-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-obs-build-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-obs-build-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-source-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-syms-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-syms-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-syms-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-syms-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-vanilla-base-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-vanilla-base-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-vanilla-base-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:kernel-vanilla-base-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:reiserfs-kmp-default-4.12.14-150000.150.92.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:reiserfs-kmp-default-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:reiserfs-kmp-default-4.12.14-150000.150.92.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:reiserfs-kmp-default-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-default-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-default-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-default-base-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-default-base-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-default-devel-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-default-devel-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-devel-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-docs-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-macros-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-obs-build-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-obs-build-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-source-4.12.14-150000.150.92.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-syms-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-syms-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-vanilla-base-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:kernel-vanilla-base-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:reiserfs-kmp-default-4.12.14-150000.150.92.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:reiserfs-kmp-default-4.12.14-150000.150.92.2.x86_64	—	Vendor Fix

Threats

Impact low

CVE-2019-19377

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact important

CVE-2019-20811

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2021-20292

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2021-20321

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2021-33061

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2021-38208

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2021-39711

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2021-43389

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2022-1011

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact important

CVE-2022-1184

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2022-1353

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2022-1419

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact important

CVE-2022-1516

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2022-1652

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact important

CVE-2022-1729

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact important

CVE-2022-1734

7.4 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact important

CVE-2022-1974

6.8 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2022-1975

4.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2022-21123

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2022-21125

5.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2022-21127

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2022-21166

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2022-21180

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact moderate

CVE-2022-21499

8.4 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact important

CVE-2022-30594

8.4 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 103 products, the same list as for CVE-2017-13695

Threats

Impact important

References

157 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1028340	self
https://bugzilla.suse.com/1055710	self
https://bugzilla.suse.com/1071995	self
https://bugzilla.suse.com/1087082	self
https://bugzilla.suse.com/1114648	self
https://bugzilla.suse.com/1158266	self
https://bugzilla.suse.com/1172456	self
https://bugzilla.suse.com/1183723	self
https://bugzilla.suse.com/1187055	self
https://bugzilla.suse.com/1191647	self
https://bugzilla.suse.com/1191958	self
https://bugzilla.suse.com/1195651	self
https://bugzilla.suse.com/1196367	self
https://bugzilla.suse.com/1196426	self
https://bugzilla.suse.com/1197219	self
https://bugzilla.suse.com/1197343	self
https://bugzilla.suse.com/1198400	self
https://bugzilla.suse.com/1198516	self
https://bugzilla.suse.com/1198577	self
https://bugzilla.suse.com/1198687	self
https://bugzilla.suse.com/1198742	self
https://bugzilla.suse.com/1198776	self
https://bugzilla.suse.com/1198825	self
https://bugzilla.suse.com/1199012	self
https://bugzilla.suse.com/1199063	self
https://bugzilla.suse.com/1199314	self
https://bugzilla.suse.com/1199399	self
https://bugzilla.suse.com/1199426	self
https://bugzilla.suse.com/1199505	self
https://bugzilla.suse.com/1199507	self
https://bugzilla.suse.com/1199605	self
https://bugzilla.suse.com/1199650	self
https://bugzilla.suse.com/1200143	self
https://bugzilla.suse.com/1200144	self
https://bugzilla.suse.com/1200249	self
https://www.suse.com/security/cve/CVE-2017-13695/	self
https://www.suse.com/security/cve/CVE-2019-19377/	self
https://www.suse.com/security/cve/CVE-2019-20811/	self
https://www.suse.com/security/cve/CVE-2021-20292/	self
https://www.suse.com/security/cve/CVE-2021-20321/	self
https://www.suse.com/security/cve/CVE-2021-33061/	self
https://www.suse.com/security/cve/CVE-2021-38208/	self
https://www.suse.com/security/cve/CVE-2021-39711/	self
https://www.suse.com/security/cve/CVE-2021-43389/	self
https://www.suse.com/security/cve/CVE-2022-1011/	self
https://www.suse.com/security/cve/CVE-2022-1184/	self
https://www.suse.com/security/cve/CVE-2022-1353/	self
https://www.suse.com/security/cve/CVE-2022-1419/	self
https://www.suse.com/security/cve/CVE-2022-1516/	self
https://www.suse.com/security/cve/CVE-2022-1652/	self
https://www.suse.com/security/cve/CVE-2022-1729/	self
https://www.suse.com/security/cve/CVE-2022-1734/	self
https://www.suse.com/security/cve/CVE-2022-1974/	self
https://www.suse.com/security/cve/CVE-2022-1975/	self
https://www.suse.com/security/cve/CVE-2022-21123/	self
https://www.suse.com/security/cve/CVE-2022-21125/	self
https://www.suse.com/security/cve/CVE-2022-21127/	self
https://www.suse.com/security/cve/CVE-2022-21166/	self
https://www.suse.com/security/cve/CVE-2022-21180/	self
https://www.suse.com/security/cve/CVE-2022-21499/	self
https://www.suse.com/security/cve/CVE-2022-30594/	self
https://www.suse.com/security/cve/CVE-2017-13695	external
https://bugzilla.suse.com/1055710	external
https://bugzilla.suse.com/1087082	external
https://www.suse.com/security/cve/CVE-2019-19377	external
https://bugzilla.suse.com/1158266	external
https://bugzilla.suse.com/1162338	external
https://bugzilla.suse.com/1162369	external
https://bugzilla.suse.com/1173871	external
https://bugzilla.suse.com/1211495	external
https://www.suse.com/security/cve/CVE-2019-20811	external
https://bugzilla.suse.com/1172456	external
https://www.suse.com/security/cve/CVE-2021-20292	external
https://bugzilla.suse.com/1183723	external
https://www.suse.com/security/cve/CVE-2021-20321	external
https://bugzilla.suse.com/1191647	external
https://www.suse.com/security/cve/CVE-2021-33061	external
https://bugzilla.suse.com/1196426	external
https://www.suse.com/security/cve/CVE-2021-38208	external
https://bugzilla.suse.com/1187055	external
https://www.suse.com/security/cve/CVE-2021-39711	external
https://bugzilla.suse.com/1197219	external
https://www.suse.com/security/cve/CVE-2021-43389	external
https://bugzilla.suse.com/1191958	external
https://www.suse.com/security/cve/CVE-2022-1011	external
https://bugzilla.suse.com/1197343	external
https://bugzilla.suse.com/1197344	external
https://bugzilla.suse.com/1198687	external
https://bugzilla.suse.com/1204132	external
https://bugzilla.suse.com/1212322	external
https://www.suse.com/security/cve/CVE-2022-1184	external
https://bugzilla.suse.com/1198577	external
https://bugzilla.suse.com/1210859	external
https://www.suse.com/security/cve/CVE-2022-1353	external
https://bugzilla.suse.com/1198516	external
https://bugzilla.suse.com/1212293	external
https://www.suse.com/security/cve/CVE-2022-1419	external
https://bugzilla.suse.com/1198742	external
https://bugzilla.suse.com/1201655	external
https://bugzilla.suse.com/1203034	external
https://www.suse.com/security/cve/CVE-2022-1516	external
https://bugzilla.suse.com/1199012	external
https://www.suse.com/security/cve/CVE-2022-1652	external
https://bugzilla.suse.com/1199063	external
https://bugzilla.suse.com/1200057	external
https://bugzilla.suse.com/1200751	external
https://bugzilla.suse.com/1201034	external
https://bugzilla.suse.com/1201832	external
https://bugzilla.suse.com/1204132	external
https://bugzilla.suse.com/1212307	external
https://www.suse.com/security/cve/CVE-2022-1729	external
https://bugzilla.suse.com/1199507	external
https://bugzilla.suse.com/1199697	external
https://bugzilla.suse.com/1201832	external
https://www.suse.com/security/cve/CVE-2022-1734	external
https://bugzilla.suse.com/1199605	external
https://bugzilla.suse.com/1199606	external
https://bugzilla.suse.com/1201832	external
https://www.suse.com/security/cve/CVE-2022-1974	external
https://bugzilla.suse.com/1200144	external
https://bugzilla.suse.com/1200265	external
https://www.suse.com/security/cve/CVE-2022-1975	external
https://bugzilla.suse.com/1200143	external
https://www.suse.com/security/cve/CVE-2022-21123	external
https://bugzilla.suse.com/1199650	external
https://bugzilla.suse.com/1200549	external
https://bugzilla.suse.com/1209075	external
https://www.suse.com/security/cve/CVE-2022-21125	external
https://bugzilla.suse.com/1199650	external
https://bugzilla.suse.com/1200549	external
https://bugzilla.suse.com/1209074	external
https://www.suse.com/security/cve/CVE-2022-21127	external
https://bugzilla.suse.com/1199650	external
https://bugzilla.suse.com/1200549	external
https://www.suse.com/security/cve/CVE-2022-21166	external
https://bugzilla.suse.com/1199650	external
https://bugzilla.suse.com/1200549	external
https://bugzilla.suse.com/1209073	external
https://www.suse.com/security/cve/CVE-2022-21180	external
https://bugzilla.suse.com/1199650	external
https://bugzilla.suse.com/1200549	external
https://bugzilla.suse.com/1212313	external
https://www.suse.com/security/cve/CVE-2022-21499	external
https://bugzilla.suse.com/1199426	external
https://bugzilla.suse.com/1200059	external
https://bugzilla.suse.com/1203034	external
https://bugzilla.suse.com/1204132	external
https://bugzilla.suse.com/1212315	external
https://www.suse.com/security/cve/CVE-2022-30594	external
https://bugzilla.suse.com/1199505	external
https://bugzilla.suse.com/1199602	external
https://bugzilla.suse.com/1201549	external
https://bugzilla.suse.com/1204132	external

JSON

To clipboard

Loading 1.0 MB of JSON…

CVE-2017-13695 (GCVE-0-2017-13695)

Vulnerability from cvelistv5 – Published: 2017-08-25 07:00 – Updated: 2024-08-05 19:05

Summary

The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
https://usn.ubuntu.com/3696-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3762-1/	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/100497	vdb-entryx_refsource_BID
https://usn.ubuntu.com/3762-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3696-2/	vendor-advisoryx_refsource_UBUNTU
https://github.com/acpica/acpica/pull/296/commits…	x_refsource_MISC
https://patchwork.kernel.org/patch/9850567/	x_refsource_MISC

Date Public

2017-08-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:05:19.987Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3696-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3696-1/"
          },
          {
            "name": "USN-3762-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3762-1/"
          },
          {
            "name": "100497",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100497"
          },
          {
            "name": "USN-3762-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3762-2/"
          },
          {
            "name": "USN-3696-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3696-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/acpica/acpica/pull/296/commits/37f2c716f2c6ab14c3ba557a539c3ee3224931b5"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://patchwork.kernel.org/patch/9850567/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-08-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-11T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3696-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3696-1/"
        },
        {
          "name": "USN-3762-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3762-1/"
        },
        {
          "name": "100497",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100497"
        },
        {
          "name": "USN-3762-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3762-2/"
        },
        {
          "name": "USN-3696-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3696-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/acpica/acpica/pull/296/commits/37f2c716f2c6ab14c3ba557a539c3ee3224931b5"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://patchwork.kernel.org/patch/9850567/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-13695",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3696-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3696-1/"
            },
            {
              "name": "USN-3762-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3762-1/"
            },
            {
              "name": "100497",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100497"
            },
            {
              "name": "USN-3762-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3762-2/"
            },
            {
              "name": "USN-3696-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3696-2/"
            },
            {
              "name": "https://github.com/acpica/acpica/pull/296/commits/37f2c716f2c6ab14c3ba557a539c3ee3224931b5",
              "refsource": "MISC",
              "url": "https://github.com/acpica/acpica/pull/296/commits/37f2c716f2c6ab14c3ba557a539c3ee3224931b5"
            },
            {
              "name": "https://patchwork.kernel.org/patch/9850567/",
              "refsource": "MISC",
              "url": "https://patchwork.kernel.org/patch/9850567/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-13695",
    "datePublished": "2017-08-25T07:00:00.000Z",
    "dateReserved": "2017-08-25T00:00:00.000Z",
    "dateUpdated": "2024-08-05T19:05:19.987Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19377 (GCVE-0-2019-19377)

Vulnerability from cvelistv5 – Published: 2019-11-29 15:55 – Updated: 2024-08-05 02:16

Summary

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://github.com/bobfuzzer/CVE/tree/master/CVE-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2020010…	x_refsource_CONFIRM
https://usn.ubuntu.com/4367-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4369-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4414-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:16:47.126Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
          },
          {
            "name": "USN-4367-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4367-1/"
          },
          {
            "name": "USN-4369-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4369-1/"
          },
          {
            "name": "USN-4414-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4414-1/"
          },
          {
            "name": "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-12-10T23:06:14.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
        },
        {
          "name": "USN-4367-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4367-1/"
        },
        {
          "name": "USN-4369-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4369-1/"
        },
        {
          "name": "USN-4414-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4414-1/"
        },
        {
          "name": "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19377",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377",
              "refsource": "MISC",
              "url": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200103-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
            },
            {
              "name": "USN-4367-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4367-1/"
            },
            {
              "name": "USN-4369-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4369-1/"
            },
            {
              "name": "USN-4414-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4414-1/"
            },
            {
              "name": "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19377",
    "datePublished": "2019-11-29T15:55:05.000Z",
    "dateReserved": "2019-11-28T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:16:47.126Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-20811 (GCVE-0-2019-20811)

Vulnerability from cvelistv5 – Published: 2020-06-03 02:44 – Updated: 2024-08-05 02:53

Summary

An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

5 references

URL	Tags
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://www.debian.org/security/2020/dsa-4698	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/4527-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:53:09.166Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9e"
          },
          {
            "name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html"
          },
          {
            "name": "DSA-4698",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4698"
          },
          {
            "name": "USN-4527-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4527-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-23T19:06:10.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9e"
        },
        {
          "name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html"
        },
        {
          "name": "DSA-4698",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4698"
        },
        {
          "name": "USN-4527-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4527-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-20811",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9e",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9e"
            },
            {
              "name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html"
            },
            {
              "name": "DSA-4698",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4698"
            },
            {
              "name": "USN-4527-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4527-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-20811",
    "datePublished": "2020-06-03T02:44:12.000Z",
    "dateReserved": "2020-06-03T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:53:09.166Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-20292 (GCVE-0-2021-20292)

Vulnerability from cvelistv5 – Published: 2021-05-28 10:42 – Updated: 2024-08-03 17:37

Summary

There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.

Severity

No CVSS data available.

CWE

CWE-416

Assigner

redhat redhat root

References

2 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1939686	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST

Impacted products

1 product

Vendor	Product	Version
n/a	kernel	Affected: Kernel 5.9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:37:23.604Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1939686"
          },
          {
            "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Kernel 5.9"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-23T01:07:04.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1939686"
        },
        {
          "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2021-20292",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Kernel 5.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-416"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1939686",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1939686"
            },
            {
              "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2021-20292",
    "datePublished": "2021-05-28T10:42:44.000Z",
    "dateReserved": "2020-12-17T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:37:23.604Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-20321 (GCVE-0-2021-20321)

Vulnerability from cvelistv5 – Published: 2022-02-18 17:50 – Updated: 2024-08-03 17:37

Summary

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system.

Severity

No CVSS data available.

CWE

CWE-362

Assigner

redhat redhat root

References

4 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=2013242	x_refsource_MISC
https://lore.kernel.org/all/20211011134508.748956…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
https://www.debian.org/security/2022/dsa-5096	vendor-advisoryx_refsource_DEBIAN

Impacted products

1 product

Vendor	Product	Version
n/a	kernel	Affected: kernel 5.15-rc5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:37:23.681Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2013242"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/all/20211011134508.748956131%40linuxfoundation.org/"
          },
          {
            "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
          },
          {
            "name": "DSA-5096",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5096"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "kernel 5.15-rc5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-03-10T02:06:57.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2013242"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lore.kernel.org/all/20211011134508.748956131%40linuxfoundation.org/"
        },
        {
          "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
        },
        {
          "name": "DSA-5096",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5096"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2021-20321",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "kernel 5.15-rc5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-362"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=2013242",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2013242"
            },
            {
              "name": "https://lore.kernel.org/all/20211011134508.748956131@linuxfoundation.org/",
              "refsource": "MISC",
              "url": "https://lore.kernel.org/all/20211011134508.748956131@linuxfoundation.org/"
            },
            {
              "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
            },
            {
              "name": "DSA-5096",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5096"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2021-20321",
    "datePublished": "2022-02-18T17:50:44.000Z",
    "dateReserved": "2020-12-17T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:37:23.681Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33061 (GCVE-0-2021-33061)

Vulnerability from cvelistv5 – Published: 2022-02-09 22:04 – Updated: 2025-05-05 16:52

Summary

Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:21 UTC

CWE

denial of service
NVD-CWE-Other

Assigner

intel mitre root

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) 82599 Ethernet Controllers and Adapters	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:42:19.563Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00571.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220210-0010/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-33061",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:21:33.110089Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "NVD-CWE-Other",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T16:52:43.248Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) 82599 Ethernet Controllers and Adapters",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": " denial of service ",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-10T09:07:37.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00571.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220210-0010/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-33061",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) 82599 Ethernet Controllers and Adapters",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": " denial of service "
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00571.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00571.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220210-0010/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220210-0010/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-33061",
    "datePublished": "2022-02-09T22:04:34.000Z",
    "dateReserved": "2021-05-18T00:00:00.000Z",
    "dateUpdated": "2025-05-05T16:52:43.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-38208 (GCVE-0-2021-38208)

Vulnerability from cvelistv5 – Published: 2021-08-08 19:22 – Updated: 2024-08-04 01:37

Summary

net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://github.com/torvalds/linux/commit/4ac06a1e…	x_refsource_MISC
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2021/08/17/1	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2021/08/17/2	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1992810	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2021/08/24/2	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T01:37:16.360Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/4ac06a1e013cf5fdd963317ffd3b968560f33bba"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.10"
          },
          {
            "name": "[oss-security] 20210817 Re: Linux kernel: nfc: null ptr dereference in llcp_sock_getname",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/08/17/1"
          },
          {
            "name": "[oss-security] 20210817 Re: Linux kernel: nfc: null ptr dereference in llcp_sock_getname",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/08/17/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1992810"
          },
          {
            "name": "[oss-security] 20210824 Re: Linux kernel: nfc: null ptr dereference in llcp_sock_getname",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/08/24/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-24T14:06:12.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/4ac06a1e013cf5fdd963317ffd3b968560f33bba"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.10"
        },
        {
          "name": "[oss-security] 20210817 Re: Linux kernel: nfc: null ptr dereference in llcp_sock_getname",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/08/17/1"
        },
        {
          "name": "[oss-security] 20210817 Re: Linux kernel: nfc: null ptr dereference in llcp_sock_getname",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/08/17/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1992810"
        },
        {
          "name": "[oss-security] 20210824 Re: Linux kernel: nfc: null ptr dereference in llcp_sock_getname",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/08/24/2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-38208",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/4ac06a1e013cf5fdd963317ffd3b968560f33bba",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/4ac06a1e013cf5fdd963317ffd3b968560f33bba"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.10",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.10"
            },
            {
              "name": "[oss-security] 20210817 Re: Linux kernel: nfc: null ptr dereference in llcp_sock_getname",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/08/17/1"
            },
            {
              "name": "[oss-security] 20210817 Re: Linux kernel: nfc: null ptr dereference in llcp_sock_getname",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/08/17/2"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1992810",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1992810"
            },
            {
              "name": "[oss-security] 20210824 Re: Linux kernel: nfc: null ptr dereference in llcp_sock_getname",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/08/24/2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-38208",
    "datePublished": "2021-08-08T19:22:22.000Z",
    "dateReserved": "2021-08-08T00:00:00.000Z",
    "dateUpdated": "2024-08-04T01:37:16.360Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39711 (GCVE-0-2021-39711)

Vulnerability from cvelistv5 – Published: 2022-03-16 14:03 – Updated: 2024-08-04 02:13

Summary

In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154175781References: Upstream kernel

Severity

No CVSS data available.

CWE

Information disclosure

Assigner

google_android Google root

References

1 reference

URL	Tags
https://source.android.com/security/bulletin/pixe…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	Android	Affected: Android kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:13:37.838Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/pixel/2022-03-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Android kernel"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154175781References: Upstream kernel"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-03-16T14:03:42.000Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://source.android.com/security/bulletin/pixel/2022-03-01"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "ID": "CVE-2021-39711",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Android kernel"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154175781References: Upstream kernel"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://source.android.com/security/bulletin/pixel/2022-03-01",
              "refsource": "MISC",
              "url": "https://source.android.com/security/bulletin/pixel/2022-03-01"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2021-39711",
    "datePublished": "2022-03-16T14:03:42.000Z",
    "dateReserved": "2021-08-23T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:13:37.838Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-43389 (GCVE-0-2021-43389)

Vulnerability from cvelistv5 – Published: 2021-11-04 18:39 – Updated: 2024-08-04 03:55

Summary

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

10 references

URL	Tags
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
https://seclists.org/oss-sec/2021/q4/39	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://lore.kernel.org/netdev/CAFcO6XOvGQrRTaTka…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2021/11/05/1	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
https://www.debian.org/security/2022/dsa-5096	vendor-advisoryx_refsource_DEBIAN
https://www.oracle.com/security-alerts/cpujul2022.html	x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=2013180	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T03:55:28.480Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://seclists.org/oss-sec/2021/q4/39"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1f3e2e97c003f80c4b087092b225c8787ff91e4d"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/netdev/CAFcO6XOvGQrRTaTkaJ0p3zR7y7nrAWD79r48=L_BbOyrK9X-vA%40mail.gmail.com/"
          },
          {
            "name": "[oss-security] 20211105 Re: Linux kernel: isdn: cpai: array-index-out-of-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/11/05/1"
          },
          {
            "name": "[debian-lts-announce] 20211216 [SECURITY] [DLA 2843-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html"
          },
          {
            "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
          },
          {
            "name": "DSA-5096",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5096"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2013180"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-07-25T16:40:02.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://seclists.org/oss-sec/2021/q4/39"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1f3e2e97c003f80c4b087092b225c8787ff91e4d"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lore.kernel.org/netdev/CAFcO6XOvGQrRTaTkaJ0p3zR7y7nrAWD79r48=L_BbOyrK9X-vA%40mail.gmail.com/"
        },
        {
          "name": "[oss-security] 20211105 Re: Linux kernel: isdn: cpai: array-index-out-of-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/11/05/1"
        },
        {
          "name": "[debian-lts-announce] 20211216 [SECURITY] [DLA 2843-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html"
        },
        {
          "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
        },
        {
          "name": "DSA-5096",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5096"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2013180"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-43389",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15"
            },
            {
              "name": "https://seclists.org/oss-sec/2021/q4/39",
              "refsource": "MISC",
              "url": "https://seclists.org/oss-sec/2021/q4/39"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1f3e2e97c003f80c4b087092b225c8787ff91e4d",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1f3e2e97c003f80c4b087092b225c8787ff91e4d"
            },
            {
              "name": "https://lore.kernel.org/netdev/CAFcO6XOvGQrRTaTkaJ0p3zR7y7nrAWD79r48=L_BbOyrK9X-vA@mail.gmail.com/",
              "refsource": "MISC",
              "url": "https://lore.kernel.org/netdev/CAFcO6XOvGQrRTaTkaJ0p3zR7y7nrAWD79r48=L_BbOyrK9X-vA@mail.gmail.com/"
            },
            {
              "name": "[oss-security] 20211105 Re: Linux kernel: isdn: cpai: array-index-out-of-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/11/05/1"
            },
            {
              "name": "[debian-lts-announce] 20211216 [SECURITY] [DLA 2843-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html"
            },
            {
              "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
            },
            {
              "name": "DSA-5096",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5096"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2022.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=2013180",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2013180"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-43389",
    "datePublished": "2021-11-04T18:39:06.000Z",
    "dateReserved": "2021-11-04T00:00:00.000Z",
    "dateUpdated": "2024-08-04T03:55:28.480Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1011 (GCVE-0-2022-1011)

Vulnerability from cvelistv5 – Published: 2022-03-18 00:00 – Updated: 2024-08-02 23:47

Summary

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

Severity

No CVSS data available.

CWE

CWE-416

Assigner

redhat redhat root

References

5 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/m…
https://bugzilla.redhat.com/show_bug.cgi?id=2064855
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://www.debian.org/security/2022/dsa-5173	vendor-advisory
https://www.oracle.com/security-alerts/cpujul2022.html

Impacted products

1 product

Vendor	Product	Version
n/a	kernel	Affected: Linux kernel 5.16-rc8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:47:43.229Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git/commit/?h=for-next"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064855"
          },
          {
            "name": "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
          },
          {
            "name": "DSA-5173",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5173"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux kernel 5.16-rc8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free flaw was found in the Linux kernel\u2019s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-07T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git/commit/?h=for-next"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064855"
        },
        {
          "name": "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
        },
        {
          "name": "DSA-5173",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5173"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-1011",
    "datePublished": "2022-03-18T00:00:00.000Z",
    "dateReserved": "2022-03-17T00:00:00.000Z",
    "dateUpdated": "2024-08-02T23:47:43.229Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

SUSE-SU-2022:2103-1

CVE-2017-13695 (GCVE-0-2017-13695)

CVE-2019-19377 (GCVE-0-2019-19377)

CVE-2019-20811 (GCVE-0-2019-20811)

CVE-2021-20292 (GCVE-0-2021-20292)

CVE-2021-20321 (GCVE-0-2021-20321)

CVE-2021-33061 (GCVE-0-2021-33061)

CVE-2021-38208 (GCVE-0-2021-38208)

CVE-2021-39711 (GCVE-0-2021-39711)

CVE-2021-43389 (GCVE-0-2021-43389)

CVE-2022-1011 (GCVE-0-2022-1011)

Tags

Sightings

Nomenclature