All CVEs — page 468 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw is a race condition in the Linux kernel where an unprivileged user can exploit a race window to free a PID before the task is fully released, leading to a use-after-free condition in the proc filesystem.
The flaw allows a malicious webpage to exploit DNS rebinding to read project source, write malicious code, and launch local programs without user interaction, posing a significant security risk.
The flaw involves a memory corruption vulnerability in the Linux kernel's MPLS handling, where skb_mpls_pop() fails to clear the inner_protocol record, leading to a negative offset in skb_network_offset(). This can result in a large memcpy operation, potentially causing a system crash or other severe issues.
The flaw involves a use-after-free vulnerability in the Linux kernel's Open vSwitch flow table mask array, which can lead to a kernel crash or potentially allow an attacker to execute arbitrary code.