CVE-2023-3357
A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system.
- Обновитесь до 5.15.0-1035.42~20.04.1.1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости linux-azure-fde-5.15 · Страница 6
За последние 30 дней в linux-azure-fde-5.15 опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 141
CVE-2023-21102
In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel
- Обновитесь до 5.15.0-1036.43~20.04.1.1
Опубликовано ОбновленоCVE-2023-2019
A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.
- Обновитесь до 5.15.0-1029.36~20.04.1.1
Опубликовано ОбновленоCVE-2023-2006
A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
- Обновитесь до 5.15.0-1034.41~20.04.1.2
Опубликовано ОбновленоCVE-2023-2166
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.
- Обновитесь до 5.15.0-1034.41~20.04.1.2
Опубликовано ОбновленоUse-after-free in Linux kernel's io_uring subsystem
A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation. The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered. We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.
- Обновитесь до 5.15.0-1037.44~20.04.1.1
Опубликовано ОбновленоCVE-2023-1652
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.
- Обновитесь до 5.15.0-1036.43~20.04.1.1
Опубликовано ОбновленоCVE-2023-0210
A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.
- Обновитесь до 5.15.0-1035.42~20.04.1.1
Опубликовано ОбновленоCVE-2023-0179
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
- Обновитесь до 5.15.0-1034.41~20.04.1.2
Опубликовано ОбновленоCVE-2023-0386
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
- Обновитесь до 5.15.0-1036.43~20.04.1.1
Опубликовано ОбновленоCVE-2022-48424
In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur.
- Обновитесь до 5.15.0-1035.42~20.04.1.1
Опубликовано ОбновленоCVE-2022-48423
In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur.
- Обновитесь до 5.15.0-1035.42~20.04.1.1
Опубликовано ОбновленоCVE-2023-22998
In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
- Обновитесь до 5.15.0-1033.40~20.04.1.1
Опубликовано ОбновленоCVE-2023-26606
In the Linux kernel 6.0.8, there is a use-after-free in ntfs_trim_fs in fs/ntfs3/bitmap.c.
- Обновитесь до 5.15.0-1035.42~20.04.1.1
Опубликовано ОбновленоCVE-2023-26605
In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __list_del_entry_valid.
- Обновитесь до 5.15.0-1034.41~20.04.1.2
Опубликовано ОбновленоCVE-2023-26544
In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NTFS sector size and media sector size.
- Обновитесь до 5.15.0-1035.42~20.04.1.1
Опубликовано ОбновленоCVE-2023-0468
A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference.
- Обновитесь до 5.15.0-1034.41~20.04.1.2
Опубликовано ОбновленоCVE-2022-4842
A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system.
- Обновитесь до 5.15.0-1036.43~20.04.1.1
Опубликовано ОбновленоCVE-2022-4379
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conduct a remote denial
- Обновитесь до 5.15.0-1034.41~20.04.1.2
Опубликовано ОбновленоCVE-2022-4378
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.
- Обновитесь до 5.15.0-1031.38~20.04.1.1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.