CVE Vulnerability Advisory Database

[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to specific patched releases.

[Impact] Unauthenticated attackers can exploit the bandwidth test (btest) feature to leak kernel memory or cause a Denial of Service (DoS) via kernel restart.

[Mitigation] Apply security patches (6.49.21, 7.23.4, 7.24.2 or later) and disable the bandwidth test server.

[Affected Scope] Linux kernel deployments where CONFIG_POSIX_CPU_TIMERS_TASK_WORK is disabled or not supported

[Impact] Local attackers can exploit a race condition to trigger a kernel panic (DoS) or potentially achieve Local Privilege Escalation (LPE) via memory corruption

[Mitigation] Apply the official stable kernel patches or ensure CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y is enabled in the kernel configuration

[Affected Scope] Samsung mobile devices and Exynos modem-powered hardware running firmware versions prior to SMR (Security Maintenance Release) Oct-2021 Release 1

[Impact] Local attackers with radio permissions can exploit missing input validation and a format string bug to trigger kernel panic and system-wide Denial of Service (DoS)

[Mitigation] Apply the Samsung SMR October 2021 Release 1 (or later) firmware update immediately and restrict unauthorized applications from acquiring radio permissions

[Affected Scope] Samsung mobile devices with DPU (Display Processing Unit) driver prior to SMR (Samsung Maintenance Release) Mar-2021 Release 1

[Impact] A local attacker with high privileges can trigger improper file descriptor handling, leading to kernel memory corruption and system-wide kernel panic (DoS/LPE)

[Mitigation] Immediately apply the official Samsung Android security update (SMR March 2021 Release 1 or later)