CVE-2020-0432
- EPSS 0.03%
- Veröffentlicht 17.09.2020 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:53:30
In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Prod...
CVE-2020-0433
- EPSS 0.03%
- Veröffentlicht 17.09.2020 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:53:30
In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...
CVE-2020-0427
- EPSS 0.17%
- Veröffentlicht 17.09.2020 19:15:12
- Zuletzt bearbeitet 21.11.2024 04:53:30
In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Andr...
CVE-2020-0404
- EPSS 0.2%
- Veröffentlicht 17.09.2020 16:15:14
- Zuletzt bearbeitet 21.11.2024 04:53:27
In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not...
CVE-2020-10768
- EPSS 0.03%
- Veröffentlicht 16.09.2020 00:15:11
- Zuletzt bearbeitet 21.11.2024 04:56:01
A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens th...
CVE-2020-10766
- EPSS 0.08%
- Veröffentlicht 15.09.2020 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:56:01
A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution miti...
CVE-2020-10767
- EPSS 0.04%
- Veröffentlicht 15.09.2020 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:56:01
A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Spec...
CVE-2020-14314
- EPSS 0.02%
- Veröffentlicht 15.09.2020 20:15:13
- Zuletzt bearbeitet 21.11.2024 05:02:59
A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The high...
CVE-2020-25284
- EPSS 0.08%
- Veröffentlicht 13.09.2020 18:15:09
- Zuletzt bearbeitet 21.11.2024 05:17:51
The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe.
CVE-2020-25285
- EPSS 0.05%
- Veröffentlicht 13.09.2020 18:15:09
- Zuletzt bearbeitet 21.11.2024 05:17:51
A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified other impact, aka CID-17743798d812.