https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:10:02 +0000 https://cve.radiocsirt.org/vuln/cve-2016-0821 <p>The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the use of an uninitialized list entry, aka Android internal bug 26186802, a different vulnerability than CVE-2015-3636.</p> <p>The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the use of an uninitialized list entry, aka Android internal bug 26186802, a different vulnerability than CVE-2015-3636.</p> https://cve.radiocsirt.org/vuln/cve-2016-0821 https://cve.radiocsirt.org/vuln/usn-2968-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not properly validate the endpoints reported by the device. An attacker with physical access could cause a denial of service (system crash). (CVE-2015-7515)</p> <p>Ben Hawkes discovered that the Linux kernel&#39;s AIO interface allowed single writes greater than 2GB, which could cause an integer overflow when writing to certain filesystems, socket or device types. A local attacker could this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2015-8830)</p> <p>It was discovered that the Linux kernel did not keep accurate track of pipe buffer details when error conditions occurred, due to an incomplete fix for CVE-2015-1805. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges. (CVE-2016-0774)</p> <p>Zach Riggle discovered that the Linux kernel&#39;s list poison feature did not take into account the mmap_min_addr value. A local attacker could use this to bypass the kernel&#39;s poison-pointer protection mechanism while attempting to exploit an existing kernel vulnerability. (CVE-2016-0821)</p> <p>Ralf Spenneberg discovered that the USB sound subsystem in the Linux kernel did not properly validate USB device descriptors. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-2184)</p> <p>Ralf Spenneberg discovered that the ATI Wonder Remote II USB driver in the…</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not properly validate the endpoints reported by the device. An attacker with physical access could cause a denial of service (system crash). (CVE-2015-7515)</p> <p>Ben Hawkes discovered that the Linux kernel&#39;s AIO interface allowed single writes greater than 2GB, which could cause an integer overflow when writing to certain filesystems, socket or device types. A local attacker could this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2015-8830)</p> <p>It was discovered that the Linux kernel did not keep accurate track of pipe buffer details when error conditions occurred, due to an incomplete fix for CVE-2015-1805. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges. (CVE-2016-0774)</p> <p>Zach Riggle discovered that the Linux kernel&#39;s list poison feature did not take into account the mmap_min_addr value. A local attacker could use this to bypass the kernel&#39;s poison-pointer protection mechanism while attempting to exploit an existing kernel vulnerability. (CVE-2016-0821)</p> <p>Ralf Spenneberg discovered that the USB sound subsystem in the Linux kernel did not properly validate USB device descriptors. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-2184)</p> <p>Ralf Spenneberg discovered that the ATI Wonder Remote II USB driver in the…</p> https://cve.radiocsirt.org/vuln/usn-2968-1