3422 matches found
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: LoongArch: The hugepteoffset function currently returns a pointer to a PMD slot, even when the underlying entry points to an invalid invalidptetable indicating no mapping. Functions like smapshugetlbrange retrieve this invalid...
Astra Linux – Vulnerability in libavif
In libavif before version 1.3.0, the makeRoom function in stream.c has an integer overflow, resulting in a buffer overflow at stream-offset+size...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: filemap: Avoid truncating the 64-bit offset to 32 bits. On 32-bit kernels, the folioseekholedata function inadvertently truncated a 64-bit value to 32 bits, which could lead to an infinite loop when writing to an xfs filesystem...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: rtc: tps6594: Fixed integer overflow on 32-bit systems The issue arises from the multiplication in tps6594rtcsetoffset. c tmp = offset TICKSPERHOUR; The tmp variable is of type s64, but offset is of type long and lies in the rang...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: The current directory offset allocator based on mtreealloccyclic stores the next offset value to be returned in octx-nextoffset. This mechanism typically returns values that increase monotonically over time. Eventually, however,...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: iomap: Avoid truncating the 64-bit offset to 32 bits. On 32-bit kernels, iomapwritedelallocscan inadvertently used a 32-bit position due to folionextindex returning a unsigned long value. This could lead to an infinite loop when...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: vfio/platform: checking the bounds of read/write syscalls. The count and offset parameters are passed from user space without being checked. Only the offset is capped at 40 bits, which can be used to read/write data beyond the...
Vulnerability of components of Linux operating system’s kernel, net/smc, allowing a hacker to trigger a service failure
The vulnerability of the net/smc components in Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted data with parameters such as v2extoffset, eidcnt, and ismgidcnt...
CVE-2024-53017 Use of Out-of-range Pointer Offset in Camera Driver
Memory corruption while handling test pattern generator IOCTL command...
CVE-2024-53017
CVE-2024-53017 concerns Qualcomm chipsets where the camera driver’s Test Pattern Generator IOCTL handling can trigger memory corruption. Multiple connected sources align on a root cause described as “Use of Out-of-range Pointer Offset in Camera Driver,” with local exploitation potential and parti...
CVE-2024-53017 Use of Out-of-range Pointer Offset in Camera Driver
Memory corruption while handling test pattern generator IOCTL command...
SUSE CVE-2025-46806
A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4...
CVE-2025-46806
A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4...
DEBIAN-CVE-2025-46806
A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4...
CVE-2025-46806
A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4...
UBUNTU-CVE-2025-46806
A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4...
CVE-2025-46806
A flaw was found in sslh. This vulnerability allows an application-level denial of service via an out-of-range pointer offset on certain architectures. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...
CVE-2025-46806 Misaligned Memory Accesses in `is_openvpn_protocol()`
A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4...
Feng Office 注入漏洞
Feng Office formerly known as OpenGoo is an open source online office system by the Feng Office team. The system provides task management, schedule management, document management and Email sending and receiving functions. An injection vulnerability exists in Feng Office version 3.5.1.5, which...