https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 13:41:50 +0000 https://vulnerability.circl.lu/vuln/cve-2021-3739 <p><strong>Affected:</strong> kernel</p> <p>A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability.</p> <p><strong>Affected:</strong> kernel</p> <p>A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability.</p> https://vulnerability.circl.lu/vuln/cve-2021-3739 https://vulnerability.circl.lu/vuln/usn-5113-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: linux-aws-5.11, Ubuntu:20.04:LTS: linux-azure-5.11, Ubuntu:20.04:LTS: linux-gcp-5.11, Ubuntu:20.04:LTS: linux-hwe-5.11, Ubuntu:20.04:LTS: linux-oracle-5.11</p> <p>It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to expose sensitive information (WiFi network traffic). (CVE-2020-3702)</p> <p>Alois Wohlschlager discovered that the overlay file system in the Linux kernel did not restrict private clones in some situations. An attacker could use this to expose sensitive information. (CVE-2021-3732)</p> <p>It was discovered that the btrfs file system in the Linux kernel did not properly handle removing a non-existent device id. An attacker with CAP_SYS_ADMIN could use this to cause a denial of service. (CVE-2021-3739)</p> <p>It was discovered that the Qualcomm IPC Router protocol implementation in the Linux kernel did not properly validate metadata in some situations. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2021-3743)</p> <p>It was discovered that the virtual terminal (vt) device implementation in the Linux kernel contained a race condition in its ioctl handling that led to an out-of-bounds read vulnerability. A local attacker could possibly use this to expose sensitive information. (CVE-2021-3753)</p> <p>It was discovered that the BPF subsystem in the Linux kernel contained an integer overflow in its hash table implementation. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-38166)</p> <p>It was discovered that the ext4 file system in the Linux…</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: linux-aws-5.11, Ubuntu:20.04:LTS: linux-azure-5.11, Ubuntu:20.04:LTS: linux-gcp-5.11, Ubuntu:20.04:LTS: linux-hwe-5.11, Ubuntu:20.04:LTS: linux-oracle-5.11</p> <p>It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to expose sensitive information (WiFi network traffic). (CVE-2020-3702)</p> <p>Alois Wohlschlager discovered that the overlay file system in the Linux kernel did not restrict private clones in some situations. An attacker could use this to expose sensitive information. (CVE-2021-3732)</p> <p>It was discovered that the btrfs file system in the Linux kernel did not properly handle removing a non-existent device id. An attacker with CAP_SYS_ADMIN could use this to cause a denial of service. (CVE-2021-3739)</p> <p>It was discovered that the Qualcomm IPC Router protocol implementation in the Linux kernel did not properly validate metadata in some situations. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2021-3743)</p> <p>It was discovered that the virtual terminal (vt) device implementation in the Linux kernel contained a race condition in its ioctl handling that led to an out-of-bounds read vulnerability. A local attacker could possibly use this to expose sensitive information. (CVE-2021-3753)</p> <p>It was discovered that the BPF subsystem in the Linux kernel contained an integer overflow in its hash table implementation. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-38166)</p> <p>It was discovered that the ext4 file system in the Linux…</p> https://vulnerability.circl.lu/vuln/usn-5113-1