p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de linux-aws-5.15 · Page n° 195

Vulnérabilité publiée pour linux-aws-5.15 au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.

RSS ↗ JSON ↗
Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 4238

  1. CVE-2023-6040

    Élevée · CVSS 7.8EPSS 0,31%Correctif disponible

    An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)

    An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access.

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1052.57~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  2. CVE-2022-48619

    Moyenne · CVSS 5.5EPSS 0,21%Correctif disponible

    CVE-2022-48619

    An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service (panic) because input_set_capability mishandles the situation in which an event code falls outside of a bitmap.

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1019.23~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  3. CVE-2024-0340

    Moyenne · CVSS 4.4EPSS 0,24%Correctif disponible

    Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()

    A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1056.61~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  8. CVE-2023-34324

    Moyenne · CVSS 4.9EPSS 1,15%Correctif disponible

    Possible deadlock in Linux kernel event handling

    Closing of an event channel in the Linux kernel can result in a deadlock. This happens when the close is being performed in parallel to an unrelated Xen console action and the handling of a Xen console interrupt in an unprivileged guest. The closing of an event channel is e.g. triggered by removal of a paravirtual device on the other side. As this action will cause console messages to be issued on the other side quite often, the chance of triggering the deadlock is not neglectable. Note that 32-bit Arm-guests are not affected, as the 32-bit Linux kernel on Arm doesn't use queued-RW-locks, which are required to trigger the issue (on Arm32 a

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1053.58~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  9. CVE-2023-6270

    Élevée · CVSS 7EPSS 0,41%Correctif disponible

    Kernel: aoe: improper reference count leads to use-after-free vulnerability

    A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead to a denial of service condition or potential code execution.

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1063.69~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  10. CVE-2023-7192

    Moyenne · CVSS 5.5EPSS 0,3%Correctif disponible

    Kernel: refcount leak in ctnetlink_create_conntrack()

    A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1041.46~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  11. CVE-2024-0193

    Élevée · CVSS 7.8EPSS 0,84%Correctif disponible

    Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation

    A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1052.57~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  16. CVE-2023-7042

    Moyenne · CVSS 4.4EPSS 0,28%Correctif disponible

    Kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()

    A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wireless/ath/ath10k/wmi-tlv.c in the Linux kernel. This issue could be exploited to trigger a denial of service.

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1063.69~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  17. CVE-2023-6546

    Élevée · CVSS 7EPSS 0,73%Correctif disponible

    Kernel: gsm multiplexing race condition leads to privilege escalation

    A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1051.56~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  18. CVE-2023-6932

    Élevée · CVSS 7.8EPSS 0,37%Correctif disponible

    Use-after-free in Linux kernel's ipv4: igmp component

    A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1052.57~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  19. CVE-2023-6931

    Élevée · CVSS 7.8EPSS 0,71%Correctif disponible

    Out-of-bounds write in Linux kernel's Performance Events system component

    A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group(). We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1052.57~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  20. CVE-2023-6817

    Élevée · CVSS 7.8EPSS 0,33%Correctif disponible

    Use-after-free in Linux kernel's netfilter: nf_tables component

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free. We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.

    linux-aws-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1052.57~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →