Nassim Asrir has released the details, and a proof-of-concept (PoC) exploit for a high-severity vulnerability, CVE-2023-6546
Linux Kernel
Recently, two vulnerabilities were found in the Linux kernel that pose significant security threats: CVE-2024-0562 and CVE-2024-0565.
Linux Kernel has been hit by a significant security vulnerability, CVE-2023-6040, with a CVSS score of 7.8, impacting its netfilter component
CVE-2024-0193 is capable of being exploited by local adversaries to escalate privileges and execute arbitrary code
In the dynamic realm of cybersecurity, the discovery of RetSpill marks a significant evolution in Linux kernel exploitation
CVE-2023-6817, poses a severe threat with a CVSS score of 7.8, categorizing it as a high-severity issue, also PoC exploit published.
SLAM emerges from the intersection of hardware features intended for memory efficiency and the notorious Spectre vulnerabilities
Linux Kernel 6.6 version will be a Long-Term Support (LTS) release, with support extending until December 2026.
cybersecurity researcher Yordan also released a proof-of-concept (PoC) exploit demonstrating the CVE-2023-2598 flaw's impact.
This vulnerability, CVE-2023-5178, can be exploited by attackers to execute arbitrary code on vulnerable systems.
A closer examination of the affected versions reveals that Linux kernel versions 6.1, 5.15, and 5.10 are vulnerable to CVE-2023-42753
Synacktiv has released a proof-of-concept (PoC) exploit for a high-severity vulnerability (CVE-2023-35001) that exists in the Linux kernel
StackRot (CVE-2023-3269) refers to a flaw discovered in the Linux kernel's handling of stack expansion, specifically within versions 6.1 through 6.4
A Proof-of-Concept (PoC) for CVE-2023-32233 allows unprivileged local users to start a root shell on impacted systems.
CVE-2023-32233 has been discovered in the Linux kernel, which allows local authenticated users to escalate their privileges on the system.
CVE-2023-2002 has been identified within the Linux kernel, posing a significant risk to systems that utilize Bluetooth communication
A new security flaw (CVE-2023-1998) in the Linux kernel has come to light, which affects the way the kernel handles Spectre v2 mitigations
CVE-2023-1281 is a race condition vulnerability leading to a use-after-free when updating imperfect hash filters
Designated as CVE-2023-0386, this vulnerability has been assigned a CVSS score of 7.0, indicating a high level of severity
A PoC local privilege escalation exploit for the vulnerability tracked as CVE-2023-0179 (CVSS score: 7.8) has been detailed by TurtleARM.
By executing a specially-crafted program, an authenticated attacker could exploit CVE-2023-0179 to gain elevated privileges as root.
CVE-2023-0210 affects the Linux kernel's ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems