CVE-2023-3357
A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system.
- Actualiza a 5.15.0-1035.42~20.04.1.1
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de linux-azure-fde-5.15 · Página 6
Vulnerabilidades publicadas para linux-azure-fde-5.15 en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 141
CVE-2023-21102
In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel
- Actualiza a 5.15.0-1036.43~20.04.1.1
Publicación ActualizaciónCVE-2023-2019
A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.
- Actualiza a 5.15.0-1029.36~20.04.1.1
Publicación ActualizaciónCVE-2023-2006
A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
- Actualiza a 5.15.0-1034.41~20.04.1.2
Publicación ActualizaciónCVE-2023-2166
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.
- Actualiza a 5.15.0-1034.41~20.04.1.2
Publicación ActualizaciónUse-after-free in Linux kernel's io_uring subsystem
A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation. The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered. We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.
- Actualiza a 5.15.0-1037.44~20.04.1.1
Publicación ActualizaciónCVE-2023-1652
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.
- Actualiza a 5.15.0-1036.43~20.04.1.1
Publicación ActualizaciónCVE-2023-0210
A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.
- Actualiza a 5.15.0-1035.42~20.04.1.1
Publicación ActualizaciónCVE-2023-0179
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
- Actualiza a 5.15.0-1034.41~20.04.1.2
Publicación ActualizaciónCVE-2023-0386
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
- Actualiza a 5.15.0-1036.43~20.04.1.1
Publicación ActualizaciónCVE-2022-48424
In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur.
- Actualiza a 5.15.0-1035.42~20.04.1.1
Publicación ActualizaciónCVE-2022-48423
In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur.
- Actualiza a 5.15.0-1035.42~20.04.1.1
Publicación ActualizaciónCVE-2023-22998
In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
- Actualiza a 5.15.0-1033.40~20.04.1.1
Publicación ActualizaciónCVE-2023-26606
In the Linux kernel 6.0.8, there is a use-after-free in ntfs_trim_fs in fs/ntfs3/bitmap.c.
- Actualiza a 5.15.0-1035.42~20.04.1.1
Publicación ActualizaciónCVE-2023-26605
In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __list_del_entry_valid.
- Actualiza a 5.15.0-1034.41~20.04.1.2
Publicación ActualizaciónCVE-2023-26544
In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NTFS sector size and media sector size.
- Actualiza a 5.15.0-1035.42~20.04.1.1
Publicación ActualizaciónCVE-2023-0468
A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference.
- Actualiza a 5.15.0-1034.41~20.04.1.2
Publicación ActualizaciónCVE-2022-4842
A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system.
- Actualiza a 5.15.0-1036.43~20.04.1.1
Publicación ActualizaciónCVE-2022-4379
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conduct a remote denial
- Actualiza a 5.15.0-1034.41~20.04.1.2
Publicación ActualizaciónCVE-2022-4378
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.
- Actualiza a 5.15.0-1031.38~20.04.1.1
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.