Lucene search

K
redosRedosROS-20240819-01
HistoryAug 19, 2024 - 12:00 a.m.

ROS-20240819-01

2024-08-1900:00:00
redos.red-soft.ru
8
linux
kernel
drivers
memory leaks
null pointer
denial of service
confidentiality
integrity
availability
vulnerabilities
realtek
amdgpu
trusted platform module
ipv6
ipv4
smc
qlcnic
ros-20240819-01

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

Vulnerability of _rtl92e_pci_disconnect() function in drivers/staging/rtl8192e/rtl8192e/rtl_core.c module
of the RealTek RTL8192E wireless adapter driver of the Linux kernel is related to the reuse of previously freed memory.
reuse of previously freed memory. Exploitation of the vulnerability could allow an attacker to have an
affect confidentiality, integrity and availability of protected information

Vulnerability of setup_dsc_config() function in driver/gpu/drm/amd/display/dc/dsc/dc_dsc.c module of driver
amdgpu of the Linux kernel is related to the lack of input data validation. Exploitation
the vulnerability could allow an attacker to cause a denial of service

Vulnerability of ethtool_set_coalesce() function in ioctl component of Linux kernel is related to
using get_coalesce() and set_coalesce() callbacks. Exploitation of the vulnerability could allow
an attacker to cause a denial of service

A vulnerability in the fib6_rule_suppress () function in the ipv6 component of the Linux operating system kernel is related to a
A memory leak in the kernel when a fib rule is present in IPv6 nftables firewall rules and a fib rule is present in the
IPv6 routing rules contain the suppress_prefix rule. Exploitation of the vulnerability could
Allow an attacker to cause a denial of service

A vulnerability in the rtw_wx_read32() function in the r8188eu component of the Linux operating system kernel is related to a
Failure to free memory after an effective lifetime. Exploitation of the vulnerability could allow
an attacker to cause a denial of service

Vulnerability of tpm2_key_encode() function in security/keys/trusted-keys/trusted_tpm2.c module of subsystem
Trusted Platform Module (TPM) of the Linux operating system kernel is associated with a memory leak. Exploitation
the vulnerability could allow an attacker to cause a denial of service

Vulnerability of nh_create_ipv6() function in nexthop component of Linux kernel is related to
null pointer dereferencing in the nh_create_ipv6() error path due to a call to
ipv6_stub->fib6_nh_release. Exploitation of the vulnerability could allow an attacker to cause a denial of
denial of service

A vulnerability in the __dst_negative_advice() function in the include/net/sock.h module of the IPv4 protocol implementation of the kernel of the
of Linux operating system is related to reuse of previously freed memory due to competitive access to the resource (state of the resource).
competitive access to a resource (race condition). Exploitation of the vulnerability could allow an attacker to
affect confidentiality, integrity and availability of protected information

A vulnerability in the sk_psock_verdict_data_ready() function in the net/core/skmsg.c module of the operating system kernel of
Linux is related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to
cause a denial of service

Vulnerability of qlcnic_83xx_add_rings() function in qlcnic component of Linux kernel is related to
null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of
denial of service

Vulnerability of smc_vlan_by_tcpsk() function in net/smc component of Linux kernel is related to dereferencing of null pointer.
null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial-of-service
denial of service

Vulnerability of amdgpu_get_xgmi_hive() function in amdgpu component of Linux kernel is related to
memory leak in amdgpu_get_xgmi_hive() function when kobject_init_and_add fails. Exploitation of the vulnerability
could allow an attacker to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64kernel-lt< 6.1.94-1UNKNOWN

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low