almalinux/kernel-tools-libs-devel

Vulnerabilities (1,491)

• CVE-2020-14356HigAug 19, 2020
  affected < 4.18.0-305.el8fixed 4.18.0-305.el8

  A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user could use this flaw to crash the system or escalate their privileges on the system.

• CVE-2020-24394HigAug 19, 2020
  affected < 4.18.0-305.el8fixed 4.18.0-305.el8

  In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.

• CVE-2020-0305MedJul 17, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-15346

• CVE-2020-10732LowJun 12, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.

• CVE-2020-13974HigJun 9, 2020
  affected < 4.18.0-372.9.1.el8fixed 4.18.0-372.9.1.el8

  An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in

• CVE-2020-10751MedMay 26, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest

• CVE-2020-12826MedMay 12, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a do_notify_parent protection mechanism. A child process can send an arbitrary sig

• CVE-2020-12770MedMay 9, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.

• CVE-2020-12659MedMay 5, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.

• CVE-2020-12655MedMay 5, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767.

• CVE-2020-12114MedMay 4, 2020
  affected < 4.18.0-305.el8fixed 4.18.0-305.el8

  A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter.

• CVE-2020-12465MedApr 29, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.

• CVE-2020-12464MedApr 29, 2020
  affected < 4.18.0-305.el8fixed 4.18.0-305.el8

  usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.

• CVE-2020-11668HigApr 9, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.

• CVE-2019-20636MedApr 8, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.

• CVE-2020-11608MedApr 7, 2020
  affected < 4.18.0-305.el8fixed 4.18.0-305.el8

  An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints, aka CID-998912346c0d.

• CVE-2020-11565MedApr 6, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this

• CVE-2020-10942MedMar 24, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.

• CVE-2020-8649MedFeb 6, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.

• CVE-2020-8648HigFeb 6, 2020
  affected < 4.18.0-240.el8fixed 4.18.0-240.el8

  There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.