Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Debian: DSA-5173-1 moderate: Linux Kernel Privilege Escalation Issues

debian
Calendar Grey July 3, 2022
Debian Logo
The Ubuntu Security Notice USN-5124-1 addresses several vulnerabilities in the Linux kernel that require immediate action.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks

Summary

CVE-2021-4197

Eric Biederman reported that incorrect permission checks in the
cgroup process migration implementation can allow a local attacker
to escalate privileges.

CVE-2022-0494

The scsi_ioctl() was susceptible to an information leak only
exploitable by users with CAP_SYS_ADMIN or CAP_SYS_RAWIO
capabilities.

CVE-2022-0812

It was discovered that the RDMA transport for NFS (xprtrdma)
miscalculated the size of message headers, which could lead to a
leak of sensitive information between NFS servers and clients.

CVE-2022-0854

Ali Haider discovered a potential information leak in the DMA
subsystem. On systems where the swiotlb feature is needed, this
might allow a local user to read sensitive information.

CVE-2022-1011

Jann Horn discovered a flaw in the FUSE (Filesystem in User-Space)
implementation. A local user permitted to mount FUSE filesystems
could exploit this to cause a use-after-free and read sensitive
information.

CVE-2022-1012, CV...

Read the Full Advisory

Package: linux
CVE ID: CVE-2021-4197 CVE-2022-0494 CVE-2022-0812 CVE-2022-0854

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here