Spender

The Linux kernel has a vulnerability in the tracefs module, where the use of generic inode RCU for synchronizing freeing can cause a list del corruption when running the ftrace selftests. This can lead to a kernel BUG and an invalid opcode error. The vulnerability is caused by the overlapping of RCU-used or initialized-only-once members in the struct inode, such as i lru or i sb list, when structure layout randomization is enabled.

The issue allows local users to obtain root access on non-SMEP platforms via a crafted application, due to extended asm statements in the get user asm ex macro that are incompatible with the exception table. This problem arose from incorrect backporting of a patch to older kernels.

The issue is related to a memory leak in the `unshare userns` function, which can be triggered by local users through an invalid `CLONE NEWUSER` unshare call, leading to a denial of service due to memory consumption.

The issue concerns multiple vulnerabilities in the Linux operating system, specifically in the Debian GNU/Linux package, which can be exploited by a local attacker to compromise the confidentiality, integrity, and availability of protected information. A heap-based buffer overflow vulnerability exists in the `tg3 read vpd` function in the Linux kernel, allowing physically proximate attackers to cause a denial of service or possibly execute arbitrary code via crafted firmware.