p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de linux-gcp · Página 150

Vulnerabilidades publicadas para linux-gcp en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 3436

  1. CVE-2023-1281

    Alta · CVSS 7.8EPSS 0,3%Corrección disponible

    UAF in Linux kernel's tcindex (traffic control index filter) implementation

    Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2.

    linux-gcpSistemas operativos
    • Actualiza a 5.4.0-1103.112
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  3. CVE-2023-1390

    Alta · CVSS 7.5EPSS 5,1%Corrección disponible

    CVE-2023-1390

    A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.

    linux-gcpSistemas operativos
    • Actualiza a 5.4.0-1038.41
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  5. CVE-2022-3707

    Media · CVSS 5.5EPSS 0,23%Corrección disponible

    CVE-2022-3707

    A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash the system.

    linux-gcpSistemas operativos
    • Actualiza a 5.4.0-1105.114
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  6. CVE-2022-3424

    Alta · CVSS 7.8EPSS 0,24%Corrección disponible

    CVE-2022-3424

    A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

    linux-gcpSistemas operativos
    • Actualiza a 5.4.0-1101.110
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  7. CVE-2023-1118

    Alta · CVSS 7.8EPSS 0,28%Corrección disponible

    CVE-2023-1118

    A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

    linux-gcpSistemas operativos
    • Actualiza a 5.4.0-1105.114
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  11. CVE-2023-0461

    Alta · CVSS 7.8EPSS 0,65%Corrección disponible

    Use-after-free vulnerability in the Linux Kernel

    There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege. There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock. When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable. The se

    linux-gcpSistemas operativos
    • Actualiza a 5.4.0-1101.110
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  13. CVE-2023-20938

    Alta · CVSS 8.1EPSS 0,34%Código de explotación públicoCorrección disponible

    CVE-2023-20938

    In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257685302References: Upstream kernel

    linux-gcpSistemas operativos
    • Actualiza a 5.4.0-1101.110
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  14. CVE-2023-1095

    Media · CVSS 5.5EPSS 0,24%Corrección disponible

    CVE-2023-1095

    In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.

    linux-gcpSistemas operativos
    • Actualiza a 5.4.0-1093.102
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  17. CVE-2023-0597

    Media · CVSS 5.5EPSS 0,3%Corrección disponible

    CVE-2023-0597

    A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data. A local user could use this flaw to get access to some important data with expected location in memory.

    linux-gcpSistemas operativos
    • Actualiza a 5.4.0-1117.126
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  19. CVE-2023-0615

    Media · CVSS 5.5EPSS 0,19%Corrección disponible

    CVE-2023-0615

    A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOC_S_DV_TIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled.

    linux-gcpSistemas operativos
    • Actualiza a 5.4.0-1100.109
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →