4.0
Moyenne
CVE-2021-21781 An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54
Description
An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux kernel | Versions non publiées |
Références
- talosintelligence.com talosintelligence.com
- www.oracle.com www.oracle.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Linux kernel
Les 47 CVE de Linux kernel →
CVE-2023-3220
An issue was discovered in the Linux kernel through 6.1-rc8
5.5
Moyenne
CVE-2023-1652
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel
7.1
Élevée
CVE-2023-1077
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as…
Non notée
CVE-2023-1078
A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol
7.8
Élevée