p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de linux-nvidia-tegra-5.15 · Page n° 129

Vulnérabilité publiée pour linux-nvidia-tegra-5.15 au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.

RSS ↗ JSON ↗
Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 2668

  1. CVE-2023-3389

    Élevée · CVSS 7.8EPSS 0,67%Correctif disponible

    Use after free in io_uring in the Linux Kernel

    A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer. We recommend upgrading past commit ef7dfac51d8ed961b742218f526bd589f3900a59 (4716c73b188566865bdd79c3a6709696a224ac04 for 5.10 stable and 0e388fce7aec40992eadee654193cad345d62663 for 5.15 stable).

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1016.16~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  2. CVE-2023-3090

    Élevée · CVSS 7.8EPSS 0,48%Correctif disponible

    Out-of-bounds write in Linux kernel's ipvlan network driver

    A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled. We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1016.16~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  3. CVE-2023-3439

    Moyenne · CVSS 4.7EPSS 0,34%Correctif disponible

    CVE-2023-3439

    A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1016.16~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  5. CVE-2023-3355

    Moyenne · CVSS 4.7EPSS 0,29%Correctif disponible

    Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c

    A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds function, which fails because it lacks a check of the return value of kmalloc(). This issue allows a local user to crash the system.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1015.15~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  6. CVE-2023-3212

    Moyenne · CVSS 4.4EPSS 0,28%Correctif disponible

    CVE-2023-3212

    A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1017.17~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  13. CVE-2023-35788

    Élevée · CVSS 7.8EPSS 0,52%Correctif disponible

    CVE-2023-35788

    An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1015.15~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  14. CVE-2023-3268

    Élevée · CVSS 7.1EPSS 0,52%Correctif disponible

    CVE-2023-3268

    An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1016.16~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  15. CVE-2023-3161

    Moyenne · CVSS 5.5EPSS 0,2%Correctif disponible

    CVE-2023-3161

    A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1014.14~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  16. CVE-2023-3141

    Élevée · CVSS 7.1EPSS 0,43%Correctif disponible

    CVE-2023-3141

    A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1016.16~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  18. CVE-2023-34256

    Moyenne · CVSS 5.5EPSS 0,25%Correctif disponible

    CVE-2023-34256

    An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated "When modifying the block device while it is mounted by the filesystem" access.

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1017.17~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  20. CVE-2023-2612

    Moyenne · CVSS 4.4EPSS 0,28%Correctif disponible

    shiftfs lock unbalance in Ubuntu-specific kernels

    Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).

    linux-nvidia-tegra-5.15Systèmes d’exploitation
    • Mettez à jour vers 5.15.0-1014.14~20.04.1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →