p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de linux-nvidia-tegra-5.15 · Page n° 128

Vulnérabilité publiée pour linux-nvidia-tegra-5.15 au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.

RSS ↗ JSON ↗
Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 2668

  1. CVE-2023-3611

    Élevée · CVSS 7.8EPSS 0,29%Correctif disponible

    Out-of-bounds write in Linux kernel's net/sched: sch_qfq component

    An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1017.17~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  2. CVE-2023-3610

    Élevée · CVSS 7.8EPSS 0,25%Correctif disponible

    Use-after-free in Linux kernel's netfilter: nf_tables component

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered. We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1017.17~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  3. CVE-2023-3609

    Élevée · CVSS 7.8EPSS 0,49%Correctif disponible

    Use-after-free in Linux kernel's net/sched: cls_u32 component

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1017.17~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  4. CVE-2023-38432

    Critique · CVSS 9.1EPSS 2,52%Correctif disponible

    CVE-2023-38432

    An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1018.18~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  5. CVE-2023-38431

    Critique · CVSS 9.1EPSS 1,16%Correctif disponible

    CVE-2023-38431

    An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes, via pdu_size in ksmbd_conn_handler_loop, leading to an out-of-bounds read.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1025.25~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  8. CVE-2023-38428

    Critique · CVSS 9.1EPSS 3,16%Correctif disponible

    CVE-2023-38428

    An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1017.17~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  11. CVE-2023-21400

    Moyenne · CVSS 6.7EPSS 0,26%Correctif disponible

    CVE-2023-21400

    In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1017.17~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  12. CVE-2023-21255

    Élevée · CVSS 7.8EPSS 0,18%Code d’exploitation publicCorrectif disponible

    CVE-2023-21255

    In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1017.17~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  13. CVE-2023-32254

    Critique · CVSS 9.8EPSS 2,91%Correctif disponible

    Tree connection race condition remote code execution vulnerability

    A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1025.25~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  14. CVE-2023-32250

    Critique · CVSS 9EPSS 2,59%Correctif disponible

    Session race condition remote code execution vulnerability

    A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1022.22~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  17. CVE-2023-31248

    Élevée · CVSS 7.8EPSS 1,89%Correctif disponible

    Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability

    Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1016.16~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  18. CVE-2023-3338

    Moyenne · CVSS 6.5EPSS 8,48%Code d’exploitation publicCorrectif disponible

    Crash due to a null pointer dereference in the dn_nsp_send function

    A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1018.18~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  19. CVE-2023-1206

    Élevée · CVSS 8.7EPSS 0,63%Code d’exploitation publicCorrectif disponible

    CVE-2023-1206

    A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1018.18~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  20. CVE-2023-3390

    Élevée · CVSS 7.8EPSS 0,91%Correctif disponible

    Use-after-free in Linux kernel's netfilter subsystem

    A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue. We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1016.16~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →