CVE Vulnerability Advisory Database

[Affected Scope] Systems running Linux kernel with the `algif_aead` crypto subsystem module enabled.

[Impact] A local attacker can exploit this vulnerability to cause kernel memory corruption, potentially leading to local privilege escalation (LPE) to root or system instability (Kernel Panic).

[Mitigation] Apply the latest stable kernel updates from your distribution or disable the `algif_aead` socket module if not required.

[Affected Scope] Windows systems with Microsoft Defender enabled and lacking the latest security updates.

[Impact] An authorized local attacker can exploit insufficient access control granularity to elevate privileges to SYSTEM, potentially disabling security controls.

[Mitigation] Immediately update the Microsoft Defender engine and definition files to the latest version, especially as this vulnerability is actively exploited in the wild.

[Affected Scope] Automatic Bug Reporting Tool (ABRT) versions prior to 2.7.1 installed on Red Hat Enterprise Linux and Oracle Linux systems

[Impact] Local attackers with limited privileges can exploit a symlink attack to gain root privileges and achieve full system compromise

[Mitigation] Upgrade ABRT packages to version 2.7.1 or higher, or temporarily disable the abrt-ccpp service

[Affected Scope] Linux systems utilizing libuser versions before 0.56.13-8 and 0.60 before 0.60-7, specifically via the userhelper utility in the usermode package

[Impact] Local attackers can cause a Denial of Service (DoS) by corrupting the /etc/passwd file, or combine this with CVE-2015-3245 to achieve full root privilege escalation

[Mitigation] Immediately update the libuser and usermode packages to the latest patched versions using your system package manager