Oct 3, 2023

Started

• Closed✓Patched

  Looney Tunables: glibc ld.so local root on most Linux distros (CVE-2023-4911)

  A buffer overflow in glibc's dynamic loader, triggered through the GLIBC_TUNABLES environment variable, gave local users root through SUID binaries on default installs of Fedora, Ubuntu and Debian. Cloud attackers such as Kinsing were soon using it.

  GNU C Library (glibc) ld.so·Closed Nov 21, 2023·updated Nov 21, 2023

• Closed✓Patched

  Arm Mali GPU Kernel Driver: Use-After-Free (CVE-2023-4211)

  Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory. Added to CISA KEV on 2023-10-03.

  Arm Mali GPU Kernel Driver·Closed Oct 3, 2023·updated Oct 3, 2023