Butt3Rflyh4Ck

The issue is related to a null-pointer-dereference flaw in the `f2fs write end io()` function in the `fs/f2fs/data.c` module of the Linux kernel's f2fs file system. This flaw is caused by a race condition due to concurrent access to resources. Exploitation of this issue can allow a local privileged user to cause a denial of service problem.

The issue is related to a use-after-free flaw in the btrfs file system of the Linux Kernel, specifically in the `btrfs search slot` function in `fs/btrfs/ctree.c`. This flaw can be exploited to crash the system and potentially cause a kernel information leak, affecting the confidentiality, integrity, and availability of protected information.

A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This issue occurs when a user simultaneously calls DROPTAG ioctl and socket close happens, which could allow a local user to crash the system or potentially escalate their privileges on the system. The vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

توجد حالة تضارب في مكون ALSA pcm oss في نواة Linux. تحدث المشكلة في الدالة `snd pcm oss sync()`، التي يتم استدعاؤها من خلال ioctl `SNDCTL DSP SYNC` الخاص بـ OSS PCM. تستدعي هذه الوظيفة أولاً `snd pcm oss make ready()`، ثم تحصل على الميوتكس `params lock`. إذا تم إعادة تكوين الدفق بواسطة مؤشر ترابط آخر بين هاتين العمليتين، فقد يؤدي ذلك إلى عدم الاتساق ويؤدي محتملًا إلى سلوك غير متوقع، مثل إشارة إلى NULL في مخزن OSS المؤقت.

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking, which could lead to a NULL pointer dereference while handling the `SNDCTL DSP SYNC` ioctl. This issue could allow a privileged local user, such as root or a member of the audio group, to crash the system, resulting in a denial of service condition.

The issue is related to a use after free flaw in the Linux kernel NILFS file system. This flaw can be triggered when a user causes the `security inode alloc` function to fail, followed by a call to the `nilfs mdt destroy` function. A local user could exploit this issue to crash the system or potentially escalate their privileges. The exploitation may also allow an attacker to access confidential data, compromise their integrity, and cause a denial of service.

A flaw in the Linux kernel's UDF file system functionality has been found, related to an out of bounds memory write. This issue arises when a user triggers a file operation that invokes the `udf write fi()` function. A local user could exploit this flaw to crash the system or potentially execute arbitrary code.

The issue is related to a null pointer dereference in the Linux kernel's UDF file system functionality. This can be triggered by a local user through the `udf file write iter` function with a malicious UDF image, potentially allowing an attacker to crash the system.

A NULL pointer dereference flaw was found in the `btrfs rm device` function in `fs/btrfs/volumes.c` in the Linux Kernel. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability. Triggering the bug requires `CAP SYS ADMIN`.

The issue is related to a NULL pointer dereference in the net/nfc/llcp sock.c component of the Linux kernel. It can be exploited by local unprivileged users to cause a denial of service by making a getsockname call after a certain type of failure of a bind call, such as when LLCP SAP MAX is used as SAP. This can lead to a denial of service (NULL pointer dereference and BUG).

An out-of-bounds memory access flaw was found in the f2fs module of the Linux kernel. This flaw is due to a bounds check failure, allowing a local attacker to access out-of-bounds memory. The exploitation of this issue can lead to a system crash or the leak of internal kernel information, with the highest threat being to system availability.

The issue is related to a use-after-free in the `ndb queue rq` function in the Linux kernel, specifically in the `drivers/block/nbd.c` file. This could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, potentially allowing them to execute arbitrary code.

A flaw was found in the JFS filesystem code, allowing a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this issue is to confidentiality, integrity, as well as system availability.

A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change and possibly allow for memory corruption or privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.