CVE-2023-53009

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add sync after creating vram bo There will be data corruption on vram allocated by svm if the initialization is not complete and application is writting on the memory. Adding sync to wait for the initialization...

UBUNTU-CVE-2023-53009

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add sync after creating vram bo There will be data corruption on vram allocated by svm if the initialization is not complete and application is writting on the memory. Adding sync to wait for the initialization...

CVE-2023-53018 Bluetooth: hci_conn: Fix memory leaks

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix memory leaks When hcicmdsyncqueue failed in hcileterminatebig or hcilebigterminate, the memory pointed by variable d is not freed, which will cause memory leak. Add release process to error path...

CVE-2023-53009

The CVE-2023-53009 entry pertains to the Linux kernel DRM/AMDKFD path. A vulnerability was resolved by adding a synchronization step after creating a VRAM buffer object (vram bo) to wait for initialization completion. Without this sync, data corruption could occur in VRAM allocated by svm if an a...

CVE-2023-53009 drm/amdkfd: Add sync after creating vram bo

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add sync after creating vram bo There will be data corruption on vram allocated by svm if the initialization is not complete and application is writting on the memory. Adding sync to wait for the initialization...

CVE-2023-53009

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add sync after creating vram bo There will be data corruption on vram allocated by svm if the initialization is not complete and application is writting on the memory. Adding sync to wait for the initialization...

USN-7379-1 linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from amdkfd creating vram buffers and then not synchronizing them...

The vulnerability in the module sound/core/seq/oss/seq_oss_synth.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the sound/core/seq/oss/seqosssynth.c module of the Linux operating system is related to synchronization errors when using a shared resource during the processing of SysEx messages. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the hci_cb_list() function in the Linux kernel Bluetooth driver allows a hacker to induce a service failure.

The vulnerability of the hcicblist function in the Linux kernel Bluetooth driver is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerabilities of the functions rxrpc_open_socket(), rxrpc_encap_rcv(), and rxrpc_io_thread() in the Linux operating system, allowing a hacker to cause a service failure

The vulnerabilities of the functions rxrpcopensocket, rxrpcencaprcv, and rxrpciothread in the Linux operating system are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to cause service failures...

The vulnerability of the cifs_sync_mid_result() function in the fs/smb/client/transport.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cifssyncmidresult function in the fs/smb/client/transport.c module of the Linux operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ufshcd_mcq_req_to_hwq() function in the drivers/ufs/core/ufs-mcq.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the ufshcdmcqreqtohwq function in the drivers/ufs/core/ufs-mcq.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the pdsc_checkpci_health() function in the drivers/net/ethernet/amd/pds_core/core.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the pdsccheckpcihealth function in the drivers/net/ethernet/amd/pdscore/core.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fiemap_process_hole() function in the fs/btrfs/extent_io.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fiemapprocesshole function in the fs/btrfs/extentio.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ice_reset VF() function in the drivers/net/ethernet/intel/ice/ice VF_lib.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the icereset VF function in the drivers/net/ethernet/intel/ice/ice VFlib.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ufshcd_abort_one() function in the drivers/ufs/core/ufshcd.c kernel module of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the ufshcdabortone function in the drivers/ufs/core/ufshcd.c file of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the f2fs_handle_critical_error() function in the fs/f2fs/super.c module of the F2FS file system in the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the f2fshandlecriticalerror function in the fs/f2fs/super.c module of the F2FS file system in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Incorrect Synchronization

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Synchronization due to improper access control mechanisms. An attacker can view and delete any files by directly calling specific API endpoints without needing administrative privileges. This is onl...

The vulnerability of the freeep_fback() function in the drivers/usb/gadget/function/u_audio.c module of the Linux kernel driver allows a hacker to cause a service failure.

The vulnerability of the freeepfback function in the drivers/usb/gadget/function/uaudio.c file of the Linux kernel’s USB driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...