7537 matches found
SUSE CVE-2023-52827
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound read in ath12khttpullppdustats len is extracted from HTT message and could be an unexpected value in case errors happen, so add validation before using to avoid possible out-of-bound read i...
kernel: nvmet-tcp: add bounds check on Transfer Tag
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds check on Transfer Tag ttag is used as an index to get cmd in nvmettcphandleh2cdatapdu, add a bounds check to avoid out-of-bounds access...
DEBIAN-CVE-2021-47444
In the Linux kernel, the following vulnerability has been resolved: drm/edid: In connectorbadedid cap numofext by numblocks read In commit e11f5bd8228f "drm: Add support for DP 1.4 Compliance edid corruption test" the function connectorbadedid started assuming that the memory for the EDID passed ...
CVE-2021-47444
In the Linux kernel, the following vulnerability has been resolved: drm/edid: In connectorbadedid cap numofext by numblocks read In commit e11f5bd8228f "drm: Add support for DP 1.4 Compliance edid corruption test" the function connectorbadedid started assuming that the memory for the EDID passed ...
UBUNTU-CVE-2021-47444
In the Linux kernel, the following vulnerability has been resolved: drm/edid: In connectorbadedid cap numofext by numblocks read In commit e11f5bd8228f "drm: Add support for DP 1.4 Compliance edid corruption test" the function connectorbadedid started assuming that the memory for the EDID passed ...
CVE-2021-47444
In the Linux kernel, the following vulnerability has been resolved: drm/edid: In connectorbadedid cap numofext by numblocks read In commit e11f5bd8228f "drm: Add support for DP 1.4 Compliance edid corruption test" the function connectorbadedid started assuming that the memory for the EDID passed ...
CVE-2021-47444
CVE-2021-47444 relates to the Linux kernel DRM/EDID handling. The issue stems from connector_bad_edid() assuming the EDID buffer could hold edid[0x7e] + 1 blocks, while ignoring the actual allocated size indicated by num_blocks. A bounds check was added to prevent reading beyond allocated memory,...
CVE-2021-47444 drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
In the Linux kernel, the following vulnerability has been resolved: drm/edid: In connectorbadedid cap numofext by numblocks read In commit e11f5bd8228f "drm: Add support for DP 1.4 Compliance edid corruption test" the function connectorbadedid started assuming that the memory for the EDID passed ...
DEBIAN-CVE-2023-52804
In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for dbmaxag and dbagpref Both dbmaxag and dbagpref are used as the index of the dbagfree array, but there is currently no validity check for dbmaxag and dbagpref, which can lead to errors. The following...
DEBIAN-CVE-2023-52746
In the Linux kernel, the following vulnerability has been resolved: xfrm/compat: prevent potential spectre v1 gadget in xfrmxlate32attr int type = nlatypenla; if type XFRMAMAX return -EOPNOTSUPP; @type is then used as an array index and can be used as a Spectre v1 gadget. if nlalennla...
CVE-2023-52734
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2023-52734
CVE-2023-52734 entry is rejected by the CVE Numbering Authority and not a current vulnerability.
SUSE CVE-2024-35948
In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing bounds check in superblock validation. Note that we don't yet have repair code for this case - repair code for individual items is generally low...
SUSE CVE-2024-35976
In the Linux kernel, the following vulnerability has been resolved: xsk: validate user input for XDPUMEM|COMPLETIONFILLRING syzbot reported an illegal copy in xsksetsockopt 1 Make sure to validate setsockopt @optlen parameter. 1 BUG: KASAN: slab-out-of-bounds in copyfromsockptroffset...
CVE-2024-35948
A flaw was found in the bcachefs module in the Linux kernel. Missing bounds check in the superblock validation allows a local user to cause a denial of service...
CVE-2024-35948
In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing bounds check in superblock validation. Note that we don't yet have repair code for this case - repair code for individual items is generally low...
DEBIAN-CVE-2024-35948
In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing bounds check in superblock validation. Note that we don't yet have repair code for this case - repair code for individual items is generally low...
UBUNTU-CVE-2024-35948
In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing bounds check in superblock validation. Note that we don't yet have repair code for this case - repair code for individual items is generally low...
CVE-2024-35948
In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end of sb clean section Fix a missing bounds check in superblock validation. Note that we don't yet have repair code for this case - repair code for individual items is generally low...
CVE-2024-35948
In the Linux kernel (bcachefs), a missing bounds check in superblock validation allowed journal entries to overrun the end of the clean section. The issue has been fixed with a bounds-check in the superblock validation path. No repair code for individual items is available; the entire superblock ...