CVE-2022-0850
- EPSS 0.02%
- Veröffentlicht 29.08.2022 15:15:09
- Zuletzt bearbeitet 21.11.2024 06:39:31
A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.
CVE-2021-3669
- EPSS 0.01%
- Veröffentlicht 26.08.2022 16:15:09
- Zuletzt bearbeitet 03.11.2025 22:15:50
A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.
- EPSS 0.56%
- Veröffentlicht 26.08.2022 16:15:09
- Zuletzt bearbeitet 21.11.2024 06:22:41
A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to effective UID, and real GID equal to effective GID. The descendant wi...
CVE-2022-2978
- EPSS 0.06%
- Veröffentlicht 24.08.2022 16:15:12
- Zuletzt bearbeitet 21.11.2024 07:02:01
A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentiall...
CVE-2021-4037
- EPSS 0.05%
- Veröffentlicht 24.08.2022 16:15:09
- Zuletzt bearbeitet 21.11.2024 06:36:46
A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set...
CVE-2021-4155
- EPSS 0.02%
- Veröffentlicht 24.08.2022 16:15:09
- Zuletzt bearbeitet 21.11.2024 06:37:00
A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them.
CVE-2021-3714
- EPSS 0.07%
- Veröffentlicht 23.08.2022 16:15:09
- Zuletzt bearbeitet 21.11.2024 06:22:13
A flaw was found in the Linux kernels memory deduplication mechanism. Previous work has shown that memory deduplication can be attacked via a local exploitation mechanism. The same technique can be used if an attacker can upload page sized files and ...
CVE-2022-26373
- EPSS 0.11%
- Veröffentlicht 18.08.2022 20:15:11
- Zuletzt bearbeitet 05.05.2025 17:18:03
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVE-2022-2503
- EPSS 0.01%
- Veröffentlicht 12.08.2022 11:15:07
- Zuletzt bearbeitet 21.11.2024 07:01:07
Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch...
CVE-2022-20368
- EPSS 0.05%
- Veröffentlicht 11.08.2022 15:15:10
- Zuletzt bearbeitet 21.11.2024 06:42:40
Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel