https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:27:31 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:0558 <p><strong>Affected:</strong> AlmaLinux:8: kernel-tools-libs-devel</p> <p>The kernel packages contain the Linux kernel, the core of any Linux operating system.</p> <p>Security Fix(es):</p> <p>* kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free (CVE-2020-29661)</p> <p>* kernel: performance counters race condition use-after-free (CVE-2020-14351)</p> <p>* kernel: ICMP rate limiting can be used for DNS poisoning attack (CVE-2020-25705)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Bug Fix(es):</p> <p>* Final fixes + drop alpha_support flag requirement for Tigerlake (BZ#1882620)</p> <p>* OVS complains Invalid Argument on TCP packets going into conntrack (BZ#1892744)</p> <p>* BUG: using smp_processor_id() in preemptible [00000000] code: handler106/3082 (BZ#1893281)</p> <p>* Icelake performance - add intel_idle: Customize IceLake server support to AlmaLinux-8 (BZ#1897183)</p> <p>* [mlx5] IPV6 TOS rewrite flows are not getting offloaded in HW (BZ#1897688)</p> <p>* AlmaLinux 8.3 SAS - multipathd fails to re-establish paths during controller random reset (BZ#1900112)</p> <p>* AlmaLinux8.3 Beta - AlmaLinux8.3 hangs on dbginfo.sh execution, crash dump generated (mm-) (BZ#1903019)</p> <p>* Win10 guest automatic reboot after migration in Win10 and WSL2 on AMD hosts (BZ#1905084)</p> <p>* block, dm: fix IO splitting for stacked devices (BZ#1905136)</p> <p>* Failed to hotplug scsi-hd disks (BZ#1905214)</p> <p>* PCI quirk needed to prevent GPU hang (BZ#1906516)</p> <p>* AlmaLinux8.2 -…</p> <p><strong>Affected:</strong> AlmaLinux:8: kernel-tools-libs-devel</p> <p>The kernel packages contain the Linux kernel, the core of any Linux operating system.</p> <p>Security Fix(es):</p> <p>* kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free (CVE-2020-29661)</p> <p>* kernel: performance counters race condition use-after-free (CVE-2020-14351)</p> <p>* kernel: ICMP rate limiting can be used for DNS poisoning attack (CVE-2020-25705)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Bug Fix(es):</p> <p>* Final fixes + drop alpha_support flag requirement for Tigerlake (BZ#1882620)</p> <p>* OVS complains Invalid Argument on TCP packets going into conntrack (BZ#1892744)</p> <p>* BUG: using smp_processor_id() in preemptible [00000000] code: handler106/3082 (BZ#1893281)</p> <p>* Icelake performance - add intel_idle: Customize IceLake server support to AlmaLinux-8 (BZ#1897183)</p> <p>* [mlx5] IPV6 TOS rewrite flows are not getting offloaded in HW (BZ#1897688)</p> <p>* AlmaLinux 8.3 SAS - multipathd fails to re-establish paths during controller random reset (BZ#1900112)</p> <p>* AlmaLinux8.3 Beta - AlmaLinux8.3 hangs on dbginfo.sh execution, crash dump generated (mm-) (BZ#1903019)</p> <p>* Win10 guest automatic reboot after migration in Win10 and WSL2 on AMD hosts (BZ#1905084)</p> <p>* block, dm: fix IO splitting for stacked devices (BZ#1905136)</p> <p>* Failed to hotplug scsi-hd disks (BZ#1905214)</p> <p>* PCI quirk needed to prevent GPU hang (BZ#1906516)</p> <p>* AlmaLinux8.2 -…</p> https://cve.radiocsirt.org/vuln/alsa-2021:0558 https://cve.radiocsirt.org/vuln/bdu:2020-05832 bdu:2020-05832 https://cve.radiocsirt.org/vuln/bdu:2020-05832 https://cve.radiocsirt.org/vuln/certfr-2020-avi-711 certfr-2020-avi-711 https://cve.radiocsirt.org/vuln/certfr-2020-avi-711 https://cve.radiocsirt.org/vuln/cnvd-2021-43367 cnvd-2021-43367 https://cve.radiocsirt.org/vuln/cnvd-2021-43367 https://cve.radiocsirt.org/vuln/euvd-2026-42368 EUVD-2026-42368 https://cve.radiocsirt.org/vuln/euvd-2026-42368 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14351 <p>A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p>A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-14351 https://cve.radiocsirt.org/vuln/ghsa-969c-xcr8-6f87 <p>A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p>A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/ghsa-969c-xcr8-6f87 https://cve.radiocsirt.org/vuln/gsd-2020-14351 gsd-2020-14351 https://cve.radiocsirt.org/vuln/gsd-2020-14351 https://cve.radiocsirt.org/vuln/msrc_cve-2020-14351 msrc_CVE-2020-14351 https://cve.radiocsirt.org/vuln/msrc_cve-2020-14351 https://cve.radiocsirt.org/vuln/oesa-2021-1003 <p><strong>Affected:</strong> openEuler:20.03-LTS: kernel, openEuler:20.03-LTS-SP1: kernel</p> <p>The Linux Kernel, the operating system core itself.</p> <p>Security Fix(es):</p> <p>A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2020-14351)</p> <p>An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. drivers/xen/events/events_base.c allows event-channel removal during the event-handling loop (a race condition). This can cause a use-after-free or NULL pointer dereference, as demonstrated by a dom0 crash via events for an in-reconfiguration paravirtualized device, aka CID-073d0552ead5.(CVE-2020-27675)</p> <p>A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality.(CVE-2020-25656)</p> <p>Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.(CVE-2020-12352)</p> <p>A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.(CVE-2020-29661)</p> <p>A flaw was found in the w…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS: kernel, openEuler:20.03-LTS-SP1: kernel</p> <p>The Linux Kernel, the operating system core itself.</p> <p>Security Fix(es):</p> <p>A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2020-14351)</p> <p>An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. drivers/xen/events/events_base.c allows event-channel removal during the event-handling loop (a race condition). This can cause a use-after-free or NULL pointer dereference, as demonstrated by a dom0 crash via events for an in-reconfiguration paravirtualized device, aka CID-073d0552ead5.(CVE-2020-27675)</p> <p>A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality.(CVE-2020-25656)</p> <p>Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.(CVE-2020-12352)</p> <p>A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.(CVE-2020-29661)</p> <p>A flaw was found in the w…</p> https://cve.radiocsirt.org/vuln/oesa-2021-1003 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1906-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1906-1 https://cve.radiocsirt.org/vuln/rhsa-2021:0537 <p>kernel: performance counters race condition use-after-free kernel: ICMP rate limiting can be used for DNS poisoning attack kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free</p> <p>kernel: performance counters race condition use-after-free kernel: ICMP rate limiting can be used for DNS poisoning attack kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0537 https://cve.radiocsirt.org/vuln/suse-su-2020:3122-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2020:3122-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14351 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-aws-hwe, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe and 64 more</p> <p>A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-aws-hwe, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe and 64 more</p> <p>A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14351