7387 matches found
UBUNTU-CVE-2024-27403
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flowoffloadadd fails, error path...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which is caused by a reference count underflow in the netfilter module...
PT-2024-21893 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified in the Linux kernel, specifically around the sysctl netrom obsolescence count initialiser in the netrom component. Recommendations: At the moment,...
QEMU sdhci_write_dataport DoS
The vulnerability of the sdhciwritedataport function in the QEMU hardware emulation software is related to overflow in the queue, caused by the parameters s-datacount and s-fifobuffer. Exploiting this vulnerability can allow a hacker to cause a service failure...
CVE-2024-4676
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /view/rangegradetext.php. The manipulation of the argument count leads to cross site scripting. The attack may be initiated...
OESA-2024-1541 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become ...
OESA-2024-1535 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.CVE-2021-47084 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.CVE-2021-47085 In the Linux...
PT-2024-32174
Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A issue was found in the processing of the file /view/range grade text.php, where the manipulation of the count argument leads to cross-site scripting. This can be...
PT-2024-28068
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak issue exists in the ax25 dev device down function, which can cause a memory leak when the ax25 device is shutting down. The issue arises because the ax25 dev devic...
SUSE CVE-2022-48701
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in sndusbparseaudiointerface There may be a bad USB audio device with a USB ID of 0x04fa, 0x4201 and the number of it's interfaces less than 4, an out-of-bounds read bug occurs when parsi...
PT-2024-25019 · Unknown · Go-Ethereum
Name of the Vulnerable Software and Affected Versions: go-ethereum geth versions prior to 1.13.15 Description: A vulnerable node can be made to consume very large amounts of memory when handling specially crafted p2p messages sent from an attacker node, potentially resulting in a denial of servic...
SUSE CVE-2024-27008
In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix out of bounds access When Output Resource dcb-or value is assigned in fabricatedcboutput, there may be out of bounds access to dacusers array in case dcb-or is zero because ffsdcb-or is used as index there. The 'or...
SUSE CVE-2024-27006
In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Add missing count increment to thermaldebugtztripup The count field in struct tripstats, representing the number of times the zone temperature was above the trip point, needs to be incremented in...
PT-2024-28416
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description A reference count leakage issue was found in the Linux kernel's ext4 file system, specifically in the ext4 xattr block cache find function. When ext4 sb bread returns -ENOMEM, the e refcnt of t...
CVE-2022-48700
In the Linux kernel, the following vulnerability has been resolved: vfio/type1: Unpin zero pages There's currently a reference count leak on the zero page. We increment the reference via pinuserpagesremote, but the page is later handled as an invalid/reserved page, therefore it's not accounted...
CVE-2022-48700
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-33844
The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAVMISSIONTYPE0, 1, 2, 255, which allows attacker to cut off the connection between a controller and the drone by sending MAVLink MISSIONCOUNT command with a wrong MAVMISSIONTYPE...
AZL-42265 CVE-2022-48670 affecting package kernel for versions less than 5.15.158.2-1
In the Linux kernel, the following vulnerability has been resolved: peci: cpu: Fix use-after-free in adevrelease When auxiliarydeviceadd returns an error, auxiliarydeviceuninit is called, which causes refcount for device to be decremented and .release callback will be triggered. Because adevrelea...
