NetApp HCI Baseboard Management Controller (BMC) H410C

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.

Published: 2023-06-09T00:00:00.000Z
Updated: 2025-03-11T14:56:02.248Z

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

Published: 2023-05-08T00:00:00.000Z
Updated: 2025-05-05T15:58:00.672Z

A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation.

Published: 2023-06-01T00:00:00.000Z
Updated: 2025-04-23T16:21:25.896Z

A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_install_fixed_file and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability. We recommend upgrading past commit 9d94c04c0db024922e886c9fd429659f22f48ea4.

Published: 2023-05-01T12:50:47.742Z
Updated: 2025-03-05T19:03:34.822Z

A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.

Published: 2023-04-24T00:00:00.000Z
Updated: 2025-04-23T16:22:00.741Z