Most recent entries from all

bdu:2021-04826

2026-10-03T11:18:29.125832+00:00

bdu:2021-04826

Withdrawn: BELL-CVE-2021-34693 — CVE-2021-34693 does not affect BellSoft software

2026-10-03T11:18:29.125886+00:00

Withdrawn by the publisher.

certfr-2021-avi-535 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un at…

2026-10-03T11:18:29.125914+00:00

certfr-2021-avi-535

cnvd-2021-43370

2026-10-03T11:18:29.125932+00:00

cnvd-2021-43370

EUVD-2026-28871

2026-10-03T11:18:29.125944+00:00

EUVD-2026-28871

fkie_cve-2021-34693

2026-10-03T11:18:29.125954+00:00

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.

GHSA-c44h-4g88-mw48

2026-10-03T11:18:29.126000+00:00

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.

gsd-2021-34693

2026-10-03T11:18:29.126027+00:00

gsd-2021-34693

msrc_CVE-2021-34693 — net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack…

2026-10-03T11:18:29.126046+00:00

msrc_CVE-2021-34693

OESA-2021-1279 — kernel security update

2026-10-03T11:18:29.126083+00:00

Affected: openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP2: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): there was a null pointer dereference in llcp_sock_getname in net/nfc/llcp_sock.c and reproduced it in linux-5.13.0-rc2. An unprivileged user can trigger this bug and cause denial of service. #Root Cause After creating an nfc socket, bind the address by calling bind(), if LLCP_SAP_MAX was used as SAP, it cause the bind() failed and there would set llcp_sock->service_name as NULL. Although bind() returns an error here, it does not affect calling other socket functions. sock_getname() would invoke llcp_sock_getname(), llcp_sock_getname copied service name from llcp_sock->service_name by memcpy but llcp_sock->service_name is NULL. #Fix the patch for this issue: https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=4ac06a1e013c(CVE-2021-3587) An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.(CVE-2020-36385) The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.(CVE-2020-28097) In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory location…

openSUSE-SU-2021:2305-1 — Security update for the Linux Kernel

2026-10-03T11:18:29.126195+00:00

Security update for the Linux Kernel

SUSE-SU-2021:14764-1 — Security update for the Linux Kernel

2026-10-03T11:18:29.126232+00:00

Security update for the Linux Kernel

UBUNTU-CVE-2021-34693

2026-10-03T11:18:29.126267+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 80 more

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.