Mozilla -- privilege escalation attack

[email protected] reports: Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks...

Mozilla Firefox和Mozilla Thunderbird 安全漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a separate set of Mozilla Application Suite from the Email client software. The software supports IMAP, POP mail protocols, and HTML...

The vulnerability of Mozilla Firefox’s inter-process communication mechanism allows a hacker to bypass existing security restrictions and execute arbitrary code.

The vulnerability of Mozilla Firefox’s inter-process communication mechanism is related to incorrect handling of descriptors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute arbitrary code...

DEBIAN-CVE-2023-53014

In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix memory leak in terminateall Terminate vdesc when terminating an ongoing transfer. This will ensure that the vdesc is present in the descterminated list The descriptor will be freed later in descfreelist. Thi...

DEBIAN-CVE-2022-49746

In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdmatransferinit If the function sdmaloadcontext fails, the sdmadesc will be freed, but the allocated desc-bd is forgot to be freed. We already met the sdmaloadcontext failure ca...

UBUNTU-CVE-2023-53014

In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix memory leak in terminateall Terminate vdesc when terminating an ongoing transfer. This will ensure that the vdesc is present in the descterminated list The descriptor will be freed later in descfreelist. Thi...

CVE-2023-53014

The CVE-2023-53014 issue affects the Linux kernel’s DMA engine (tegra). It describes a memory leak that occurs when terminating an ongoing transfer: the vdesc must be terminated and placed in the desc_terminated list, with the descriptor freed later in desc_free_list(). The provided connected doc...

CVE-2023-53014 dmaengine: tegra: Fix memory leak in terminate_all()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix memory leak in terminateall Terminate vdesc when terminating an ongoing transfer. This will ensure that the vdesc is present in the descterminated list The descriptor will be freed later in descfreelist. Thi...

CVE-2023-52972

Huawei PCs have a vulnerability that allows low-privilege users to bypass SDDL permission checks . Successful exploitation this vulnerability could lead to termination of some system processes...

The vulnerability of the Mojo component of the Google Chrome browser for Windows operating systems allows a hacker to bypass existing security restrictions and execute arbitrary code.

The vulnerability of the Mojo component of the Google Chrome browser for Windows operating systems is related to improper handling of descriptors. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions and execute arbitrary code by sending a specially...

Huawei PCs 安全漏洞

Huawei PCs are a line of computers from the Chinese company Huawei. Huawei PCs suffer from an authentication bypass vulnerability that originates from a low-privileged user being able to bypass SDDL privilege checks, which can be exploited by an attacker to cause certain system processes to...

usbnet: ipheth: use static NDP16 location in URB

...

pinmux: Use sequential access to access desc->pinmux data

...

PT-2025-27690

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A bug in the Linux kernel has been resolved, specifically an out-of-bounds issue in the usbhid parse function. The struct hid descriptor has been updated to reflect the mandatory and...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56756)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56756 advisory. - In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB...

SUSE CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

DEBIAN-CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

UBUNTU-CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

CVE-2025-21835 usb: gadget: f_midi: fix MIDI Streaming descriptor lengths

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...