Show filters
152 Total Results
Displaying 111-120 of 152
Sort by:
Attacker Value
Unknown

CVE-2020-25668

Disclosure Date: May 26, 2021 (last updated February 22, 2025)
A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.
Attacker Value
Unknown

CVE-2020-25673

Disclosure Date: May 26, 2021 (last updated February 22, 2025)
A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.
Attacker Value
Unknown

CVE-2020-25671

Disclosure Date: May 26, 2021 (last updated February 22, 2025)
A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations.
Attacker Value
Unknown

CVE-2020-25670

Disclosure Date: May 26, 2021 (last updated February 22, 2025)
A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations.
Attacker Value
Unknown

CVE-2021-33574

Disclosure Date: May 25, 2021 (last updated February 22, 2025)
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.
Attacker Value
Unknown

CVE-2020-25672

Disclosure Date: May 25, 2021 (last updated February 22, 2025)
A memory leak vulnerability was found in Linux kernel in llcp_sock_connect
Attacker Value
Unknown

CVE-2021-31440

Disclosure Date: May 21, 2021 (last updated February 22, 2025)
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.
Attacker Value
Unknown

CVE-2021-22543

Disclosure Date: May 18, 2021 (last updated February 22, 2025)
An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.
Attacker Value
Unknown

CVE-2021-3483

Disclosure Date: May 17, 2021 (last updated February 22, 2025)
A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions before kernel 5.12-rc6 are affected
Attacker Value
Unknown

CVE-2019-25044

Disclosure Date: May 14, 2021 (last updated February 22, 2025)
The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related to blk_mq_free_rqs and blk_cleanup_queue.