14290 matches found
GSD-2022-1006645 drm/msm/a6xx: Replace kcalloc() with kvzalloc()
drm/msm/a6xx: Replace kcalloc with kvzalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
GSD-2022-1006644 media: atomisp: prevent integer overflow in sh_css_set_black_frame()
media: atomisp: prevent integer overflow in shcsssetblackframe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
GSD-2022-1006643 drm/msm/dp: add atomic_check to bridge ops
drm/msm/dp: add atomiccheck to bridge ops This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
GSD-2022-1006641 drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage
drm/msm/a6xx: Fix kvzalloc vs statekcalloc usage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
GSD-2022-1006640 mtd: core: add missing of_node_get() in dynamic partitions code
mtd: core: add missing ofnodeget in dynamic partitions code This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
GSD-2022-1006636 net: hinic: fix memory leak when reading function table
net: hinic: fix memory leak when reading function table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
GSD-2022-1006634 net: netsec: fix error handling in netsec_register_mdio()
net: netsec: fix error handling in netsecregistermdio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
GSD-2022-1006631 x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly
x86/fpu: Fix copyxstatetouabi to copy init states correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
GSD-2022-1006628 tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
tcp: fix a signed-integer-overflow bug in tcpaddbacklog This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
GSD-2022-1006627 kcm: annotate data-races around kcm->rx_wait
kcm: annotate data-races around kcm-rxwait This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
GSD-2022-1006625 ipv6: ensure sane device mtu in tunnels
ipv6: ensure sane device mtu in tunnels This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit ccd94bd4939690e24d13e23814bce7ed853a09f...
GSD-2022-1006618 net/mlx5: Fix possible use-after-free in async command interface
net/mlx5: Fix possible use-after-free in async command interface This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...
PT-2025-26018 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-rc6 Description: A use-after-free issue has been identified in the Linux kernel, specifically in the dm sm register threshold callback function. This issue can be triggered when a metadata commit fails,...
CVE-2022-43359
Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function readimagedata. This vulnerability is triggered when parsing a crafted Gif file...
Out-of-bounds
Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function readimagedata. This vulnerability is triggered when parsing a crafted Gif file...
Xen 安全漏洞
Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A security vulnerability exists in Xen...
CVE-2022-44079
pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component sanitizer::StackDepotBasesanitizer::StackDepotNode...
Stack overflow
pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component sanitizer::StackDepotBasesanitizer::StackDepotNode...
CVE-2022-44079
CVE-2022-44079 affects the pycdc component used by Decompyle++ and related tooling. The vulnerability is a stack overflow in the sanitizer::StackDepotBase path stemming from commit 44a730f3a889503014fec94ae6e62d8401cb75e5. The CVE entry notes an availability impact (HIGH) with local attack vector...
PT-2022-27101 · Pycdc · Pycdc
Name of the Vulnerable Software and Affected Versions: pycdc version prior to the commit after 44a730f3a889503014fec94ae6e62d8401cb75e5 Description: A stack overflow issue was discovered in the pycdc component sanitizer::StackDepotBase sanitizer::StackDepotNode. Recommendations: At the moment,...