linuxsecurity.com / .linuxsecurity-com-linuxsecurity-features / Page 2

A bug in Linux's TCP Fast Open code can leave it reading memory that has already been released.

On an affected host, a second mount of the same NFSv4 share could alter SELinux label handling on the first.

Linux developers have merged a fix for a Linux kernel vulnerability that can leave Binder device creation writing to memory the kernel has already released.

Linux developers have proposed an IPsec fix after reproducing a memory error in IP-TFS, a mode that groups and pads encrypted traffic to make traffic patterns harder to infer.

Linux developers have proposed a FastRPC fix for a race that can leave the kernel using memory after it has been released.

Linux developers have proposed six fixes for the driver that reads QNX6 filesystems, a disk format associated with the QNX operating system.

A Linux device driver fix closes a use-after-free risk in the AC100 real-time clock (RTC) driver.

Flatpak 1.18.4 fixes three vulnerabilities that could let a malicious sandboxed app affect files or processes on its Linux host.

A Linux flash-storage fix prevents a double free, in which the kernel releases the same object twice during device setup.

A proposed Linux patch addresses a double unlock in the SuperH architecture's page-fault handling.