QID 353139

a null pointer dereference flaw may occur in the linux kernels relay_open in kernel/relay.c.
If the alloc_percpu() function is not validated in time of failure and used as a valid address for access.
An attacker could use this flaw to cause a denial of service. (
( CVE-2019-19462) a new domain bypass transient execution attack known as special register buffer data sampling (srbds) has been found.
This flaw allows data values from special internal registers to be leaked by an attacker able to execute code on any core of the cpu.
An unprivileged, local attacker can use this flaw to infer values returned by affected instructions known to be commonly used during cryptographic operations that rely on uniqueness, secrecy, or both. (
( CVE-2020-0543) a flaw was found in the linux kernels implementation of userspace core dumps.
This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data. (
( CVE-2020-10732) a flaw was found in the linux kernels selinux lsm hook implementation, where it anticipated the skb would only contain a single netlink message.
The hook incorrectly validated the first netlink message in the skb only, to allow or deny the rest of the messages within the skb with the granted permissions and without further processing.
At this time, there is no known ability for an attacker to abuse this flaw. (
( CVE-2020-10751) a flaw was found in the way mremap handled dax huge pages.
This flaw allows a local attacker with access to a dax enabled storage to escalate their privileges on the system. (
( CVE-2020-10757) a flaw was found in the linux kernel.
A memory leak in svm_cpu_init() is possible leading to a system crash.

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.