Most recent entries from all

bdu:2015-09845

Withdrawn: BELL-CVE-2013-7421 — CVE-2013-7421 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2015-avi-081 — De multiples vulnérabilités ont été corrigées dans le noyau Linux d'Ubuntu. Certaines d'ent…

certfr-2015-avi-081

cnvd-2015-00752

EUVD-2026-109222

fkie_cve-2013-7421

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644.

GHSA-7h46-6772-ccxh

gsd-2013-7421

RHSA-2015:2152 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

kernel: kvm: reporting emulation failures to userspace kernel: crypto api unprivileged arbitrary module load via request_module() kernel: kvm: noncanonical rip after emulation kernel: kvm: reporting emulation failures to userspace kernel: memcg: OOM handling DoS kernel: partial ASLR bypass through TLS base addresses leak kernel: crypto api unprivileged arbitrary module load via request_module() kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code Kernel: vfs: Do not allow escaping from bind mounts kernel: zero page memory arbitrary modification kernel: race condition between chown() and execve() kernel: pty layer race condition on tty ldisc shutdown. kernel: Creating multiple sockets when SCTP module isn't loaded leads to kernel panic kernel: perf on ppc64 can loop forever getting userlevel stacktraces kernel: nfnetlink race in NETLINK_NFLOG socket creation kernel: Unauthorized access to IPC objects with SysV shm kernel: securelevel disabled after kexec kernel: MTU value is not validated in IPv6 stack causing packet loss kernel: pipe buffer state corruption after unsuccessful atomic read from pipe

RHSA-2015:2411 — Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

kernel: crypto api unprivileged arbitrary module load via request_module() kernel: memcg: OOM handling DoS kernel: partial ASLR bypass through TLS base addresses leak kernel: crypto api unprivileged arbitrary module load via request_module() Kernel: vfs: Do not allow escaping from bind mounts kernel: race condition between chown() and execve() kernel: pty layer race condition on tty ldisc shutdown. kernel: Creating multiple sockets when SCTP module isn't loaded leads to kernel panic kernel: Unauthorized access to IPC objects with SysV shm kernel: securelevel disabled after kexec

UBUNTU-CVE-2013-7421

Affected: Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-lts-utopic