Linux parse_sec_desc() SMB ACL Buffer Overflow DoS

The vulnerability of the parsesecdesc function in the fs/smb/server/smbacl.c module of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the bnxten driver not properly masking the bdcnt field in the TX BD, which could lead to a TX timeout...

Linux DRM/V3D DoS

The vulnerability of the DRM/V3D component in the Linux operating system is related to the exhaustion of file descriptors. Exploiting this vulnerability can allow a hacker to cause a service failure...

CVE-2024-43066

Memory corruption while handling file descriptor during listener registration/de-registration...

CVE-2024-43066

Memory corruption while handling file descriptor during listener registration/de-registration...

CVE-2024-43066 Use After Free in HLOS

Memory corruption while handling file descriptor during listener registration/de-registration...

CVE-2024-43066 Use After Free in HLOS

Memory corruption while handling file descriptor during listener registration/de-registration...

CVE-2024-43066

CVE-2024-43066 describes a memory corruption condition that occurs when processing file descriptors during listener registration or de-registration. Multiple connected sources attribute this to Qualcomm components (including bootloader and kernel or Qualcomm closed-source components) and to Qualc...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when processing file descriptors...

CVE-2024-43066: Use After Free

Memory corruption while handling file descriptor during listener registration/de-registration...

PT-2025-15190

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto affected versions not specified Description The issue is related to memory corruption that occurs while handling file descriptors during listener registration or de-registration. Recommendations At the moment, there is...

DEBIAN-CVE-2025-21974

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: return fail if interface is down in bnxtqueuememalloc The bnxtqueuememalloc is called to allocate new queue memory when a queue is restarted. It internally accesses rx buffer descriptor corresponding to the index. The ...

UBUNTU-CVE-2025-21974

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: return fail if interface is down in bnxtqueuememalloc The bnxtqueuememalloc is called to allocate new queue memory when a queue is restarted. It internally accesses rx buffer descriptor corresponding to the index. The ...

UBUNTU-CVE-2025-21946

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parsesecdesc If osidoffset, gsidoffset and dacloffset could be greater than smbntsd struct size. If it is smaller, It could cause slab-out-of-bounds. And when validating sid, It need to check it includ...

CVE-2025-21946 ksmbd: fix out-of-bounds in parse_sec_desc()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parsesecdesc If osidoffset, gsidoffset and dacloffset could be greater than smbntsd struct size. If it is smaller, It could cause slab-out-of-bounds. And when validating sid, It need to check it includ...

CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137...

CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability affects Firefox 137 and Thunderbird 137...

CVE-2025-3032 Leaking file descriptors from the fork server

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137...

CVE-2025-3032 Leaking file descriptors from the fork server

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137...

Mozilla -- privilege escalation attack

[email protected] reports: Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks...