Or Cohen

The issue is related to a Use After Free vulnerability in the NFC sockets of the Linux kernel. This vulnerability can be exploited by a local attacker to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP NET RAW capability. The vulnerability is associated with the use of memory after it has been freed.

A race condition in the Linux kernel's SCTP sockets can lead to kernel privilege escalation. This issue arises when `sctp destroy sock` is called without proper locking, allowing an element to be removed from the `auto asconf splist` list. An attacker with network service privileges can exploit this to escalate to root, or an unprivileged user can exploit it directly if a `BPF CGROUP INET SOCK CREATE` is attached, which denies the creation of some SCTP sockets.

A flaw in the Linux kernel allows memory corruption to be exploited, potentially granting root privileges to unprivileged processes. This poses a significant threat to data confidentiality and integrity. The vulnerability is related to the AF PACKET socket implementation and can be exploited by a local unprivileged user to execute code with root privileges or escape from isolated containers if root access is available.

The issue is related to the `vcs write` function in the Linux kernel, specifically in the `drivers/tty/vt/vc screen.c` file. It involves a buffer overflow in memory, which could allow an attacker to elevate their privileges. The problem is that `vcs write` does not prevent write access to `vcsu` devices.