Most recent entries from all

ALSA-2021:5227 — Moderate: kernel security and bug fix update

Affected: AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: In Overlayfs missing a check for a negative dentry before calling vfs_rename() (CVE-2021-20321)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* panic while breaking a lease/delegation after user mode helper invocation (BZ#2010333)

* The ASR driver is causing a system crash in AlmaLinux8.4 compared to AlmaLinux8.3 due to kernel changes (BZ#2016384)

* AlmaLinux8: DFS provided SMB shares are not accessible following unprivileged access (BZ#2017177)

* Avoid hitting the rtnl_trylock/restart_syscall logic in net-sysfs when possible (BZ#2021165)

* AlmaLinux8: x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT (BZ#2024678)

* AlmaLinux8.4-[Regression][P10][DD2.0][Rainier/Denali] - system crashed while offlining and onlining cores (BZ#2026450)

bdu:2022-05684

Withdrawn: BELL-CVE-2021-20321 — CVE-2021-20321 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2021-avi-969 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Elles permettent à un attaquant de provo…

certfr-2021-avi-969

cnvd-2022-21490

EUVD-2026-21635

fkie_cve-2021-20321

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system.

gsd-2021-20321

msrc_CVE-2021-20321 — A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in…

msrc_CVE-2021-20321

OESA-2021-1475 — kernel security update

Affected: openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP2: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.(CVE-2021-4002) In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel(CVE-2021-0920) A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.(CVE-2021-4037) A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to…

RHSA-2021:5227 — Red Hat Security Advisory: kernel security and bug fix update

kernel: In Overlayfs missing a check for a negative dentry before calling vfs_rename()

RHSA-2021:5241 — Red Hat Security Advisory: kernel-rt security and bug fix update

kernel: In Overlayfs missing a check for a negative dentry before calling vfs_rename()

SUSE-SU-2022:1651-1 — Security update for the Linux Kernel

Security update for the Linux Kernel

UBUNTU-CVE-2021-20321

Affected: Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 84 more

WID-SEC-W-2022-0137 — Android Patchday Juni 2022

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen und einen Denial-of-Service-Zustand auszulösen.