CVE Vulnerability Advisory Database

[Affected Scope] Acronis Backup plugins for Linux-based hosting panels (cPanel, Plesk, DirectAdmin) prior to specific builds.

[Impact] Local attackers can exploit insecure file permissions to gain root-level privileges on the host server, leading to full system compromise.

[Mitigation] Immediate update to the latest plugin versions (cPanel 1.9.3.1021+, Plesk 1.8.11.638+, DirectAdmin 1.2.3.238+).

[Affected Scope] Linux kernel systems utilizing UDPv6 sockets with MSG_MORE and MSG_SPLICE_PAGES flags

[Impact] Unprivileged local users can trigger a heap out-of-bounds write, leading to system crash (Denial of Service) or Local Privilege Escalation (LPE)

[Mitigation] Apply the latest stable kernel patches from upstream or your Linux distribution vendor, and restrict unprivileged user namespaces if immediate patching is not feasible

[Affected Scope] Linux systems utilizing ebtables SNAT targets within bridge netfilter configurations.

[Impact] Local attackers can trigger kernel memory corruption, leading to Denial of Service (DoS) or Privilege Escalation.

[Mitigation] Apply the latest kernel security patches provided by your distribution and reboot.

[Affected Scope] Linux kernel network stack (skbuff) and systems utilizing IPsec (ESP).

[Impact] Local attackers can exploit the packet coalescing process to overwrite kernel memory (e.g., page cache), potentially leading to privilege escalation.

[Mitigation] Immediately apply the latest kernel security patches provided by your distribution and reboot the system.

[Affected Scope] Systems running Linux kernel with the algif_aead crypto subsystem module enabled.

[Impact] A local attacker can exploit this vulnerability to cause kernel memory corruption, potentially leading to local privilege escalation (LPE) to root or system instability (Kernel Panic).

[Mitigation] Apply the latest stable kernel updates from your distribution or disable the algif_aead socket module if not required.

[Affected Scope] All systems and services utilizing the Linux Kernel Crypto API (AF_ALG) interface.

[Impact] Internal socket state inconsistency and potential Denial of Service (DoS) due to concurrent write operations.

[Mitigation] Update to the latest stable kernel version provided by your distribution and reboot.

[Affected Scope] Linux systems utilizing in-kernel TLS (ktls) offload or software implementation.

[Impact] Remote attackers can trigger memory corruption or kernel panic, potentially leading to full system compromise (RCE).

[Mitigation] Immediately update the Linux kernel to the latest stable version provided by your distribution.

[Affected Scope] Linux kernel deployments where CONFIG_POSIX_CPU_TIMERS_TASK_WORK is disabled or not supported

[Impact] Local attackers can exploit a race condition to trigger a kernel panic (DoS) or potentially achieve Local Privilege Escalation (LPE) via memory corruption

[Mitigation] Apply the official stable kernel patches or ensure CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y is enabled in the kernel configuration

[Affected Scope] Linux kernel environments utilizing specific USB audio devices such as Creative Extigy and Digidesign Mbox

[Impact] Connecting a maliciously crafted USB device can trigger an out-of-bounds memory access in the kernel, potentially leading to a Denial of Service (Kernel Panic) or Local Privilege Escalation (LPE)

[Mitigation] Apply the latest stable kernel patches from your distribution or blacklist the unused ALSA USB audio kernel module

[Affected Scope] Systems running the Linux kernel with the ALSA (Advanced Linux Sound Architecture) USB-Audio driver enabled.

[Impact] A local attacker can trigger an out-of-bounds read by connecting a malicious USB audio device, potentially leading to kernel memory disclosure or system crash (DoS).

[Mitigation] Apply the latest Linux kernel security patches and restrict unauthorized USB device connections and driver loading.

[Affected Scope] Systems running the Linux kernel with the UVC (USB Video Class) driver enabled

[Impact] A local attacker can trigger an out-of-bounds write in kernel memory via a malicious USB device, leading to Local Privilege Escalation (LPE) or Kernel Panic (DoS)

[Mitigation] Apply the latest stable Linux kernel security patches or blacklist the uvcvideo kernel module if not required

[Affected Scope] All Linux kernel-based systems utilizing HID (Human Interface Device) drivers

[Impact] Local attackers can exploit uninitialized memory buffers to leak sensitive kernel memory contents via specially-crafted HID reports

[Mitigation] Apply the latest stable kernel updates provided by your Linux distribution and reboot the system

[Affected Scope] Linux kernel versions utilizing the network subsystem, particularly environments running UDP socket-based applications

[Impact] Local attackers can exploit an RCU synchronization race condition to trigger a Use-After-Free (UAF), potentially leading to local privilege escalation (LPE) to root or system-wide Denial of Service (DoS)

[Mitigation] Immediately upgrade the Linux kernel to the latest patched stable release and perform a system reboot

[Affected Scope] Linux kernel versions from v5.14 up to v6.6.14 with the nf_tables module enabled

[Impact] Local unprivileged users can trigger kernel memory corruption, leading to arbitrary code execution and full root privilege escalation

[Mitigation] Apply the official kernel patch or restrict unprivileged user namespace creation as an immediate workaround

[Affected Scope] Linux systems utilizing the Netfilter (nftables) subsystem within the Linux kernel

[Impact] Local attackers can trigger kernel memory corruption, leading to arbitrary code execution with root privileges and complete system compromise

[Mitigation] Apply the latest kernel security patches from your distribution vendor, or restrict unprivileged user namespace creation as an immediate workaround

[Affected Scope] Devices powered by Qualcomm Snapdragon chipsets running Linux or Android kernel-based graphics drivers

[Impact] Local attackers can trigger kernel memory corruption via malicious IOCTL calls, leading to Local Privilege Escalation (LPE) to Root/Kernel level

[Mitigation] Apply the official security patches released by Qualcomm and device OEMs in or after December 2023

[Affected Scope] Systems and container environments utilizing the Linux kernel OverlayFS subsystem

[Impact] A local attacker can escalate privileges to root by copying a setuid/capable file from a nosuid mount into another mount

[Mitigation] Apply the latest kernel security patches from your distribution or restrict unprivileged user namespaces as a temporary workaround

[Affected Scope] Linux kernel versions from 5.8 up to 5.17-rc8 utilizing the watch_queue event notification subsystem.

[Impact] A local unprivileged attacker can overwrite kernel state memory, potentially leading to local privilege escalation (LPE) to root or system denial of service (DoS).

[Mitigation] Apply the latest kernel security patches immediately, or restrict unprivileged user namespaces as a temporary mitigation.

[Affected Scope] Container environments and host OS running Linux kernel versions prior to v5.17-rc3

[Impact] An attacker inside a container can bypass namespace isolation, escalate privileges to host root, and execute arbitrary code

[Mitigation] Update the Linux kernel to the patched version, and enforce container security profiles (AppArmor, Seccomp, non-root users)

[Affected Scope] Linux kernel versions 5.1 and lateral, specifically environments utilizing filesystems that fallback to legacy handling and have unprivileged user namespaces enabled

[Impact] An unprivileged local attacker can trigger a heap-based buffer overflow in kernel memory, leading to local privilege escalation (LPE) to root

[Mitigation] Apply the official kernel security patches immediately, or disable unprivileged user namespaces as a temporary workaround