UBUNTU-CVE-2021-47548

In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport The if statement: if port = DSAFGENUM return; limits the value of port less than DSAFGENUM i.e., 8. However, if the value of port is 6 or...

CVE-2021-47548

The Linux kernel contains a possible array overflow vulnerability within the ethernet: hisilicon: hns component, specifically in the hns_dsaf_misc driver's hns_dsaf_ge_srst_by_port() function. The root cause is an insufficient boundary check where the port variable is limited to less than DSAF_GE...

CVE-2021-47548 ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()

In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport The if statement: if port = DSAFGENUM return; limits the value of port less than DSAFGENUM i.e., 8. However, if the value of port is 6 or...

CVE-2021-47548 ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()

In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport The if statement: if port = DSAFGENUM return; limits the value of port less than DSAFGENUM i.e., 8. However, if the value of port is 6 or...

CVE-2021-47547

The Linux kernel contains an out-of-bounds array access vulnerability within the net: tulip: de4x5 component. Specifically, in line 5001, if all values in the array lp->phy[8] are non-zero, the loop variable k reaches 8 at the end of the loop, potentially leading to an out-of-bounds access. Th...

CVE-2021-47547 net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound

In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if all id in the array 'lp-phy8' is not 0, when the 'for' end, the 'k' is 8. At this time, the array 'lp-phy8' may be out of bound...

CVE-2021-47547 net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound

In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if all id in the array 'lp-phy8' is not 0, when the 'for' end, the 'k' is 8. At this time, the array 'lp-phy8' may be out of bound...

CVE-2021-47547: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if all id in the array 'lp-phy8' is not 0, when the 'for' end, the 'k' is 8. At this time, the array 'lp-phy8' may be out of bound...

PT-2024-9054

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an out-of-bounds array access in the Linux kernel, specifically in the net: tulip: de4x5 component. The problem arises when the array 'lp-phy8' is accessed with...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an array overflow vulnerability in hnsdsafgesrstbyport...

CVE-2021-47548: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport The if statement: if port = DSAFGENUM return; limits the value of port less than DSAFGENUM i.e., 8. However, if the value of port is 6 or...

CVE-2023-52746

In the Linux kernel, the following vulnerability has been resolved: xfrm/compat: prevent potential spectre v1 gadget in xfrmxlate32attr int type = nlatypenla; if type XFRMAMAX return -EOPNOTSUPP; @type is then used as an array index and can be used as a Spectre v1 gadget. if nlalennla...

SUSE CVE-2023-52746

In the Linux kernel, the following vulnerability has been resolved: xfrm/compat: prevent potential spectre v1 gadget in xfrmxlate32attr int type = nlatypenla; if type XFRMAMAX return -EOPNOTSUPP; @type is then used as an array index and can be used as a Spectre v1 gadget. if nlalennla...

spring-boot:ConfigurationMetadataRepositoryJsonBuilderFuzzer: Security exception in org.json.JSONArray.writeTo

Detailed Report: https://oss-fuzz.com/testcase?key=5455267230711808 Project: spring-boot Fuzzing Engine: libFuzzer Fuzz Target: ConfigurationMetadataRepositoryJsonBuilderFuzzer Job Type: libfuzzerasanspring-boot Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CVE-2023-52824

REJECTED CVE A memory handling vulnerability was identified in the Linux kernel's watchqueue subsystem. The issue stems from the lack of overflow checks when duplicating a user-space array with memdupuser. This could allow an attacker to exploit the absence of safeguards, potentially leading to a...

CVE-2023-52823

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-52822

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-52820

REJECTED CVE In the Linux kernel, the following vulnerability has been resolved: drmlease.c: copy user-array safely Currently, there is no overflow-check with memdupuser. Use the new function memduparrayuser instead of memdupuser for duplicating the user-space array safely...

CVE-2023-52818

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 For pptable structs that use flexible array sizes, use flexible arrays...

CVE-2023-52805

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of the iag while allocating new inodes to avoid fragmentation problem. Added the check which is required...