Most recent entries from all

ALSA-2021:4647 — Important: kernel security update

Affected: AlmaLinux:8: kernel-tools-libs-devel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type (CVE-2021-43267)

* kernel: timer tree corruption leads to missing wakeup and system freeze (CVE-2021-20317)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2021-05673

Withdrawn: BELL-CVE-2021-43267 — CVE-2021-43267 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2021-avi-877 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Elles permettent à un attaquant de prov…

certfr-2021-avi-877

cnvd-2021-87041

EUVD-2026-32406

fkie_cve-2021-43267

An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type.

GHSA-c22h-4v9p-5cx2

gsd-2021-43267

msrc_CVE-2021-43267 — An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communic…

msrc_CVE-2021-43267

RHSA-2021:4644 — Red Hat Security Advisory: kpatch-patch security update

kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type

RHSA-2021:4647 — Red Hat Security Advisory: kernel security update

kernel: timer tree corruption leads to missing wakeup and system freeze kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type

UBUNTU-CVE-2021-43267

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-hwe and 23 more

WID-SEC-W-2022-0112 — Google Android: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code zur Ausführung zu bringen und einen Denial-of-Service-Zustand auszulösen.