https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:22:26 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:0825 <p><strong>Affected:</strong> AlmaLinux:8: kernel-tools-libs-devel</p> <p>The kernel packages contain the Linux kernel, the core of any Linux operating system.</p> <p>The following packages have been upgraded to a later upstream version: kernel (4.18.0). (BZ#2036888)</p> <p>Security Fix(es):</p> <p>* kernel: improper initialization of the &#34;flags&#34; member of the new pipe_buffer (CVE-2022-0847)</p> <p>* kernel: Use After Free in unix_gc() which could result in a local privilege escalation (CVE-2021-0920)</p> <p>* kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout (CVE-2021-4154)</p> <p>* kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330)</p> <p>* kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (CVE-2022-0435)</p> <p>* kernel: cgroups v1 release_agent feature may allow privilege escalation (CVE-2022-0492)</p> <p>* kernel: missing check in ioctl allows kernel memory read/write (CVE-2022-0516)</p> <p>* kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Bug Fix(es):</p> <p>* Intel QAT Kernel power up fix (BZ#2016437)</p> <p>* AlmaLinux8.4 seeing scsi_dma_map failed with mpt3sas driver and affecting performance (BZ#2018928)</p> <p>* [Lenovo 8.4 bug] audio_HDMI certification failed on AlmaLinux 8.4GA (No hdmi out) (BZ#2027335)</p> <p>* [AlmaLinux-8.5][4.18.0-323.el8.ppc64le][POWER8/9/10] security_flav…</p> <p><strong>Affected:</strong> AlmaLinux:8: kernel-tools-libs-devel</p> <p>The kernel packages contain the Linux kernel, the core of any Linux operating system.</p> <p>The following packages have been upgraded to a later upstream version: kernel (4.18.0). (BZ#2036888)</p> <p>Security Fix(es):</p> <p>* kernel: improper initialization of the &#34;flags&#34; member of the new pipe_buffer (CVE-2022-0847)</p> <p>* kernel: Use After Free in unix_gc() which could result in a local privilege escalation (CVE-2021-0920)</p> <p>* kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout (CVE-2021-4154)</p> <p>* kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330)</p> <p>* kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (CVE-2022-0435)</p> <p>* kernel: cgroups v1 release_agent feature may allow privilege escalation (CVE-2022-0492)</p> <p>* kernel: missing check in ioctl allows kernel memory read/write (CVE-2022-0516)</p> <p>* kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Bug Fix(es):</p> <p>* Intel QAT Kernel power up fix (BZ#2016437)</p> <p>* AlmaLinux8.4 seeing scsi_dma_map failed with mpt3sas driver and affecting performance (BZ#2018928)</p> <p>* [Lenovo 8.4 bug] audio_HDMI certification failed on AlmaLinux 8.4GA (No hdmi out) (BZ#2027335)</p> <p>* [AlmaLinux-8.5][4.18.0-323.el8.ppc64le][POWER8/9/10] security_flav…</p> https://cve.radiocsirt.org/vuln/alsa-2022:0825 https://cve.radiocsirt.org/vuln/bdu:2022-05676 bdu:2022-05676 https://cve.radiocsirt.org/vuln/bdu:2022-05676 https://cve.radiocsirt.org/vuln/certfr-2022-avi-064 certfr-2022-avi-064 https://cve.radiocsirt.org/vuln/certfr-2022-avi-064 https://cve.radiocsirt.org/vuln/euvd-2026-21363 EUVD-2026-21363 https://cve.radiocsirt.org/vuln/euvd-2026-21363 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4154 <p>A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel&#39;s cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.</p> <p>A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel&#39;s cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-4154 https://cve.radiocsirt.org/vuln/ghsa-qvm5-4fh7-hcfx <p>A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel&#39;s cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.</p> <p>A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel&#39;s cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.</p> https://cve.radiocsirt.org/vuln/ghsa-qvm5-4fh7-hcfx https://cve.radiocsirt.org/vuln/gsd-2021-4154 gsd-2021-4154 https://cve.radiocsirt.org/vuln/gsd-2021-4154 https://cve.radiocsirt.org/vuln/msrc_cve-2021-4154 msrc_CVE-2021-4154 https://cve.radiocsirt.org/vuln/msrc_cve-2021-4154 https://cve.radiocsirt.org/vuln/rhsa-2022:0186 <p>kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL kernel: fs_context: heap overflow in legacy parameter handling</p> <p>kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL kernel: fs_context: heap overflow in legacy parameter handling</p> https://cve.radiocsirt.org/vuln/rhsa-2022:0186 https://cve.radiocsirt.org/vuln/rhsa-2022:0825 <p>kernel: Use After Free in unix_gc() which could result in a local privilege escalation kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout kernel: possible privileges escalation due to missing TLB flush kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS kernel: cgroups v1 release_agent feature may allow privilege escalation kernel: missing check in ioctl allows kernel memory read/write kernel: improper initialization of the &#34;flags&#34; member of the new pipe_buffer kernel: failing usercopy allows for use-after-free exploitation</p> <p>kernel: Use After Free in unix_gc() which could result in a local privilege escalation kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout kernel: possible privileges escalation due to missing TLB flush kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS kernel: cgroups v1 release_agent feature may allow privilege escalation kernel: missing check in ioctl allows kernel memory read/write kernel: improper initialization of the &#34;flags&#34; member of the new pipe_buffer kernel: failing usercopy allows for use-after-free exploitation</p> https://cve.radiocsirt.org/vuln/rhsa-2022:0825 https://cve.radiocsirt.org/vuln/suse-su-2022:0241-1 <p>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP2)</p> <p>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP2)</p> https://cve.radiocsirt.org/vuln/suse-su-2022:0241-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-4154 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-gcp-5.4, Ubuntu:18.04:LTS: linux-gke-5.4, Ubuntu:18.04:LTS: linux-gkeop-5.4, Ubuntu:18.04:LTS: linux-hwe-5.4, Ubuntu:18.04:LTS: linux-oracle-5.4, Ubuntu:18.04:LTS: linux-raspi-5.4, Ubuntu:18.04:LTS: linux-aws-5.0 and 52 more</p> <p>A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel&#39;s cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-gcp-5.4, Ubuntu:18.04:LTS: linux-gke-5.4, Ubuntu:18.04:LTS: linux-gkeop-5.4, Ubuntu:18.04:LTS: linux-hwe-5.4, Ubuntu:18.04:LTS: linux-oracle-5.4, Ubuntu:18.04:LTS: linux-raspi-5.4, Ubuntu:18.04:LTS: linux-aws-5.0 and 52 more</p> <p>A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel&#39;s cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-4154 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0137 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0137