DeutschShown in its original language — a full translation is planned for a future version.
Linux Kernel: Mehrere Schwachstellen
view advisory published 2022-01-10
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsmechanismen zu umgehen und um Informationen offenzulegen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-4155US | medium5.5 | — | ||
A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to le… | ||||
| CVE-2021-1048US | high7.8OT critical | KEV | ||
In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional executi… | ||||
| CVE-2021-0920US | medium6.4OT critical | KEV | ||
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges n… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-0825 vom 2022-03-11external
- Oracle Linux Security Advisory ELSA-2022-9179 vom 2022-02-28external
- Oracle Linux Security Advisory ELSA-2022-9781 vom 2022-09-15external
- Oracle Linux Security Advisory ELSA-2022-9999 vom 2022-11-16external
- Red Hat Security Advisory RHSA-2022:0176 vom 2022-01-19external
- Red Hat Security Advisory RHSA-2022:0186 vom 2022-01-19external
- Red Hat Security Advisory RHSA-2022:0187 vom 2022-01-19external
- Red Hat Security Advisory RHSA-2022:0188 vom 2022-01-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan