p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de linux-nvidia-tegra-5.15 · Página 129

Vulnerabilidades publicadas para linux-nvidia-tegra-5.15 en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 2668

  1. CVE-2023-3389

    Alta · CVSS 7.8EPSS 0,67%Corrección disponible

    Use after free in io_uring in the Linux Kernel

    A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer. We recommend upgrading past commit ef7dfac51d8ed961b742218f526bd589f3900a59 (4716c73b188566865bdd79c3a6709696a224ac04 for 5.10 stable and 0e388fce7aec40992eadee654193cad345d62663 for 5.15 stable).

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1016.16~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  2. CVE-2023-3090

    Alta · CVSS 7.8EPSS 0,48%Corrección disponible

    Out-of-bounds write in Linux kernel's ipvlan network driver

    A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled. We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1016.16~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  3. CVE-2023-3439

    Media · CVSS 4.7EPSS 0,34%Corrección disponible

    CVE-2023-3439

    A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1016.16~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  5. CVE-2023-3355

    Media · CVSS 4.7EPSS 0,29%Corrección disponible

    Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c

    A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds function, which fails because it lacks a check of the return value of kmalloc(). This issue allows a local user to crash the system.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1015.15~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  6. CVE-2023-3212

    Media · CVSS 4.4EPSS 0,28%Corrección disponible

    CVE-2023-3212

    A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1017.17~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  13. CVE-2023-35788

    Alta · CVSS 7.8EPSS 0,52%Corrección disponible

    CVE-2023-35788

    An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1015.15~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  14. CVE-2023-3268

    Alta · CVSS 7.1EPSS 0,52%Corrección disponible

    CVE-2023-3268

    An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1016.16~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  15. CVE-2023-3161

    Media · CVSS 5.5EPSS 0,2%Corrección disponible

    CVE-2023-3161

    A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1014.14~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  16. CVE-2023-3141

    Alta · CVSS 7.1EPSS 0,43%Corrección disponible

    CVE-2023-3141

    A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1016.16~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  18. CVE-2023-34256

    Media · CVSS 5.5EPSS 0,25%Corrección disponible

    CVE-2023-34256

    An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated "When modifying the block device while it is mounted by the filesystem" access.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1017.17~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  20. CVE-2023-2612

    Media · CVSS 4.4EPSS 0,28%Corrección disponible

    shiftfs lock unbalance in Ubuntu-specific kernels

    Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1014.14~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →