RHSA-2021:4140 — Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-core	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-core	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-debuginfo	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-devel	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-kvm	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-modules	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debug-modules-extra	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debuginfo	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-debuginfo-common-x86_64	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-devel	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-kvm	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-modules	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::nfv	kernel-rt-modules-extra	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-core	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-core	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-debuginfo	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-devel	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-modules	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debug-modules-extra	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debuginfo	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-debuginfo-common-x86_64	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-devel	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-modules	0:4.18.0-348.rt7.130.el8
Red Hat · RHEL 8 enterprise_linux:8::realtime	kernel-rt-modules-extra	0:4.18.0-348.rt7.130.el8

Vulnerabilities 46

High 8.8

CVE-2020-36158

mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jan 5, 2021
High 8.8

CVE-2021-31440 Public exploit

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An …

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

May 21, 2021
High 7.8

CVE-2021-3489

Linux kernel eBPF RINGBUF map oversized allocation

The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This i…

Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

Jun 4, 2021
High 7.8

CVE-2021-3600

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit…

The Linux Kernel Organization linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Jan 8, 2024
Medium 6.7

CVE-2021-23133

Linux Kernel sctp_destroy_sock race condition

A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock …

Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Apr 22, 2021
Medium 5.3

CVE-2020-26146

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fr…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2019-14615 Public exploit

Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may …

Intel Intel(R) Processors linux-hwe linux-azure Debian Ubuntu

Jan 17, 2020
Unscored —

CVE-2020-0427

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local i…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Sep 17, 2020
Unscored —

CVE-2020-24502

Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before vers…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-24503

Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an …

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-24504

Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may all…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Feb 17, 2021
Unscored —

CVE-2020-24586

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-24587

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-24588

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even t…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-26140

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementa…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2020-26141

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verif…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-26143

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implemen…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2020-26144

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept p…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2020-26145

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept s…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-26147

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments ev…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-29368

An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write imp…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 28, 2020
Unscored —

CVE-2020-29660

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_i…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 9, 2020
Unscored —

CVE-2020-36312

An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory l…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 6, 2021
Unscored —

CVE-2020-36386

An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hc…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jun 7, 2021
Unscored —

CVE-2021-0129

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjac…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jun 9, 2021
Unscored —

CVE-2021-20194

There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Feb 23, 2021
Unscored —

CVE-2021-20239

A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 28, 2021
Unscored —

CVE-2021-28950

An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a ret…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 20, 2021
Unscored —

CVE-2021-28971

In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, user…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 22, 2021
Unscored —

CVE-2021-29155 Public exploit

An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds sp…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Apr 20, 2021
Unscored —

CVE-2021-29646

An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly v…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 30, 2021
Unscored —

CVE-2021-29650

An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 30, 2021
Unscored —

CVE-2021-31829

kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

May 6, 2021
Unscored —

CVE-2021-31916

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

May 6, 2021
Unscored —

CVE-2021-33033

The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

May 14, 2021
Unscored —

CVE-2021-33200

kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, a…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

May 27, 2021
Unscored —

CVE-2021-3348

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 1, 2021
Unscored —

CVE-2021-3564

A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jun 8, 2021
Unscored —

CVE-2021-3573

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls i…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Aug 13, 2021
Unscored —

CVE-2021-3635

A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_A…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 13, 2021
Unscored —

CVE-2021-3659

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 22, 2022
Unscored —

CVE-2021-3679 Public exploit

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Aug 5, 2021
Unscored —

CVE-2021-3732

A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with Overlay…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 7, 2022
Unscored —

CVE-2021-46905

net: hso: fix NULL-deref on disconnect regression

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but…

Linux Linux linux-raspi2 linux-hwe Linux Ubuntu

Feb 25, 2024
Unscored —

CVE-2022-20166

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This …

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Jun 15, 2022

References

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
report
https://bugzilla.redhat.com/show_bug.cgi?id=1875275
report
https://bugzilla.redhat.com/show_bug.cgi?id=1902412
report
https://bugzilla.redhat.com/show_bug.cgi?id=1903244
report
https://bugzilla.redhat.com/show_bug.cgi?id=1905747
report
https://bugzilla.redhat.com/show_bug.cgi?id=1906522
report
https://bugzilla.redhat.com/show_bug.cgi?id=1912683
report
https://bugzilla.redhat.com/show_bug.cgi?id=1913348
report
https://bugzilla.redhat.com/show_bug.cgi?id=1919893
report
https://bugzilla.redhat.com/show_bug.cgi?id=1921958
report
https://bugzilla.redhat.com/show_bug.cgi?id=1923636
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930376
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930379
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930381
report
https://bugzilla.redhat.com/show_bug.cgi?id=1941762
report
https://bugzilla.redhat.com/show_bug.cgi?id=1941784
report
https://bugzilla.redhat.com/show_bug.cgi?id=1945345
report
https://bugzilla.redhat.com/show_bug.cgi?id=1945388
report
https://bugzilla.redhat.com/show_bug.cgi?id=1946965
report
https://bugzilla.redhat.com/show_bug.cgi?id=1948772
report
https://bugzilla.redhat.com/show_bug.cgi?id=1951595
report
https://bugzilla.redhat.com/show_bug.cgi?id=1957788
report
https://bugzilla.redhat.com/show_bug.cgi?id=1959559
report
https://bugzilla.redhat.com/show_bug.cgi?id=1959642
report
https://bugzilla.redhat.com/show_bug.cgi?id=1959654
report
https://bugzilla.redhat.com/show_bug.cgi?id=1959657
report
https://bugzilla.redhat.com/show_bug.cgi?id=1959663
report
https://bugzilla.redhat.com/show_bug.cgi?id=1960490
report
https://bugzilla.redhat.com/show_bug.cgi?id=1960492
report
https://bugzilla.redhat.com/show_bug.cgi?id=1960496
report
https://bugzilla.redhat.com/show_bug.cgi?id=1960498
report
https://bugzilla.redhat.com/show_bug.cgi?id=1960500
report
https://bugzilla.redhat.com/show_bug.cgi?id=1960502
report
https://bugzilla.redhat.com/show_bug.cgi?id=1960504
report
https://bugzilla.redhat.com/show_bug.cgi?id=1964028
report
https://bugzilla.redhat.com/show_bug.cgi?id=1964139
report
https://bugzilla.redhat.com/show_bug.cgi?id=1965038
report
https://bugzilla.redhat.com/show_bug.cgi?id=1965458

Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 46

mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might…

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An …

Linux kernel eBPF RINGBUF map oversized allocation

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit…

Linux Kernel sctp_destroy_sock race condition

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fr…

Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may …

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local i…

Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before vers…

Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an …

Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may all…

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even t…

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementa…

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verif…

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implemen…

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept p…

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept s…

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments ev…

An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write imp…

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_i…

An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory l…

An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hc…

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjac…

There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF…

A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a…

An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a ret…

In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, user…

An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds sp…

An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly v…

An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial …

kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure …

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver …

The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and …

kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, a…

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could…

A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user …

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls i…

A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_A…

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way …

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the …

A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with Overlay…

net: hso: fix NULL-deref on disconnect regression

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This …

References