CVE-2023-3357
A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system.
- Mettez à jour vers 5.15.0-1035.42~20.04.1.1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de linux-azure-fde-5.15 · Page n° 6
Vulnérabilité publiée pour linux-azure-fde-5.15 au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 141
CVE-2023-21102
In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel
- Mettez à jour vers 5.15.0-1036.43~20.04.1.1
Publication Mise à jourCVE-2023-2019
A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.
- Mettez à jour vers 5.15.0-1029.36~20.04.1.1
Publication Mise à jourCVE-2023-2006
A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
- Mettez à jour vers 5.15.0-1034.41~20.04.1.2
Publication Mise à jourCVE-2023-2166
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.
- Mettez à jour vers 5.15.0-1034.41~20.04.1.2
Publication Mise à jourUse-after-free in Linux kernel's io_uring subsystem
A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation. The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered. We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.
- Mettez à jour vers 5.15.0-1037.44~20.04.1.1
Publication Mise à jourCVE-2023-1652
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.
- Mettez à jour vers 5.15.0-1036.43~20.04.1.1
Publication Mise à jourCVE-2023-0210
A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.
- Mettez à jour vers 5.15.0-1035.42~20.04.1.1
Publication Mise à jourCVE-2023-0179
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
- Mettez à jour vers 5.15.0-1034.41~20.04.1.2
Publication Mise à jourCVE-2023-0386
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
- Mettez à jour vers 5.15.0-1036.43~20.04.1.1
Publication Mise à jourCVE-2022-48424
In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur.
- Mettez à jour vers 5.15.0-1035.42~20.04.1.1
Publication Mise à jourCVE-2022-48423
In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur.
- Mettez à jour vers 5.15.0-1035.42~20.04.1.1
Publication Mise à jourCVE-2023-22998
In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
- Mettez à jour vers 5.15.0-1033.40~20.04.1.1
Publication Mise à jourCVE-2023-26606
In the Linux kernel 6.0.8, there is a use-after-free in ntfs_trim_fs in fs/ntfs3/bitmap.c.
- Mettez à jour vers 5.15.0-1035.42~20.04.1.1
Publication Mise à jourCVE-2023-26605
In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __list_del_entry_valid.
- Mettez à jour vers 5.15.0-1034.41~20.04.1.2
Publication Mise à jourCVE-2023-26544
In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NTFS sector size and media sector size.
- Mettez à jour vers 5.15.0-1035.42~20.04.1.1
Publication Mise à jourCVE-2023-0468
A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference.
- Mettez à jour vers 5.15.0-1034.41~20.04.1.2
Publication Mise à jourCVE-2022-4842
A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system.
- Mettez à jour vers 5.15.0-1036.43~20.04.1.1
Publication Mise à jourCVE-2022-4379
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conduct a remote denial
- Mettez à jour vers 5.15.0-1034.41~20.04.1.2
Publication Mise à jourCVE-2022-4378
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.
- Mettez à jour vers 5.15.0-1031.38~20.04.1.1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.