15004 matches found
CVE-2024-46828: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: sched: schcake: fix bulk flow accounting logic for host fairness In schcake, we keep track of the count of active bulk flows per host, when running in dst/src host fairness mode, which is used as the round-robin weight when...
CVE-2024-46818: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpioid before used as array index WHY & HOW GPIOIDUNKNOWN -1 is not a valid value for array index and therefore should be checked in advance. This fixes 5 OVERRUN issues reported by Coverity...
CVE-2024-46814: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check msgid before processing transcation WHY & HOW HDCPMESSAGEIDINVALID -1 is not a valid msgid nor is it a valid array index, and it needs checking before used. This fixes 4 OVERRUN issues reported by Coverity...
CVE-2024-46804: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access Why Coverity reports OVERRUN warning. Do not check if array index valid. How Check msgid valid and valid array index...
kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing
A vulnerability has been identified in the Linux kernel, specifically involving a possible out-of-bounds array indexing within the net/wireless/nl80211.c file related to the wireless networking subsystem. This flaw can lead to a kernel-level crash, resulting in a denial-of-service condition for t...
No title provided
No description is available for this CVE...
kernel: vt_ioctl: fix array_index_nospec in vt_setactivate
A vulnerability was found in the Linux kernel's vtioctl subsystem, where the vtsetactivate function can lead to a transient integer underflow due to improper handling of the vsa.console value. The vulnerability arises when an out-of-bounds value is decreased before being sanitized using...
kernel: protect the fetch of ->fd[fd] in do_dup2() from mispredictions
A flaw was found in the Linux kernel. The file descriptor duplication mechanism in the dodup2 function does not sanitize array indexing against speculative execution. A local user can exploit this flaw through processor branch mispredictions to trigger speculative out-of-bounds memory reads,...
No title provided
No description is available for this CVE...
No title provided
No description is available for this CVE...
No title provided
No description is available for this CVE...
kernel: md: fix resync softlockup when bitmap size is less than array size
A flaw was found in the Linux kernel's Multiple Device md subsystem. A local user could exploit this vulnerability to cause a Denial of Service DoS by triggering a system hang. The issue occurs during Redundant Array of Independent Disks RAID resynchronization when the tracking bitmap size is...
No title provided
No description is available for this CVE...
No title provided
No description is available for this CVE...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
No title provided
No description is available for this CVE...
No title provided
No description is available for this CVE...
No title provided
No description is available for this CVE...