p PatchFirst

PatchFirst · Latest vulnerabilities

linux-snapdragon vulnerabilities · Page 12

Vulnerabilities published for linux-snapdragon in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 723

  1. CVE-2021-28713

    Medium · CVSS 6.5EPSS 0.36%Fix available

    CVE-2021-28713

    Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to serv

    linux-snapdragonOperating systems
    • Update to 4.15.0-1120.129
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2021-28712

    Medium · CVSS 6.5EPSS 0.36%Fix available

    CVE-2021-28712

    Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to serv

    linux-snapdragonOperating systems
    • Update to 4.15.0-1120.129
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2021-28711

    Medium · CVSS 6.5EPSS 0.36%Fix available

    CVE-2021-28711

    Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to serv

    linux-snapdragonOperating systems
    • Update to 4.15.0-1120.129
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2021-45485

    High · CVSS 7.5EPSS 3.82%Fix available

    CVE-2021-45485

    In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

    linux-snapdragonOperating systems
    • Update to 4.15.0-1112.121
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2021-39657

    Medium · CVSS 4.4EPSS 0.16%Fix available

    CVE-2021-39657

    In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194696049References: Upstream kernel

    linux-snapdragonOperating systems
    • Update to 4.15.0-1100.109
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  10. CVE-2021-39656

    Medium · CVSS 6.7EPSS 0.12%Fix available

    CVE-2021-39656

    In __configfs_open_file of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174049066References: Upstream kernel

    linux-snapdragonOperating systems
    • Update to 4.15.0-1103.112
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  11. CVE-2021-39648

    Medium · CVSS 4.1EPSS 0.17%Fix available

    CVE-2021-39648

    In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-160822094References: Upstream kernel

    linux-snapdragonOperating systems
    • Update to 4.15.0-1097.106
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  12. CVE-2021-39636

    Medium · CVSS 4.4EPSS 0.23%Fix available

    CVE-2021-39636

    In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-120612905References: Upstream kernel

    linux-snapdragonOperating systems
    • Update to 4.15.0-1053.57
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  13. CVE-2021-1048

    High · CVSS 7.8EPSS 1.06%In KEVFix available

    CVE-2021-1048

    In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204573007References: Upstream kernel

    linux-snapdragonOperating systems
    • Update to 4.15.0-1091.100
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2021-0920

    Medium · CVSS 6.4EPSS 0.87%In KEVFix available

    CVE-2021-0920

    In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel

    linux-snapdragonOperating systems
    • Update to 4.15.0-1113.122
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. CVE-2018-25020

    High · CVSS 7.8EPSS 0.53%Fix available

    CVE-2018-25020

    The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c.

    linux-snapdragonOperating systems
    • Update to 4.15.0-1118.127
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2021-0935

    Medium · CVSS 6.7EPSS 0.19%Fix available

    CVE-2021-0935

    In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168607263References: Upstream kernel

    linux-snapdragonOperating systems
    • Update to 4.15.0-1053.57
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →