CVE Browser

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup

Util-linux: util-linux: access control bypass due to improper hostname canonicalization

util-linux: CVE-2024-28085: wall: escape sequence injection

util-linux: arbitrary commands execution via the path parameter

util-linux: Unauthorized unmount of filesystems in libmount

util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid

util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

kernel: SELinux netlink permission check bypass

pam_access does not handle netmask matches correctly

kernel: Heap-based buffer overflow in fs/ext4/xattr.c:ext4_xattr_set_entry() with crafted ext4 image

kernel: security: The built-in keyrings for security tokens can be joined as a session and then modified by the root user

kernel: drivers: getrandom(2) unblocks too early after system boot

Kernel: KVM: error in exception handling leads to wrong debug stack value

kernel: vhost: Information disclosure in vhost/vhost.c:vhost_new_msg()

util-linux: Shell command injection in unescaped bash-completed mount point names

util-linux: File name collision due to incorrect mkstemp use

util-linux: Extended partition loop in MBR partition table leads to DOS

util-linux: command injection flaw in blkid

util-linux: runuser tty hijack via TIOCSTI ioctl

colcrt: global-buffer-overflow

util-linux: mount folder existence information disclosure

The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which all…

kernel: infinite loop in highres timers (kernel hang)