6387 matches found
kernel: gfs2: NULL pointer dereference in gfs2_evict_inode()
A NULL pointer dereference flaw was found in the gfs2 file system in the Linux kernel. This issue occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. This flaw allows a privileged local user to cause ...
kernel: gfs2: NULL pointer dereference in gfs2_evict_inode()
A NULL pointer dereference flaw was found in the gfs2 file system in the Linux kernel. This issue occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. This flaw allows a privileged local user to cause ...
GNU Binutils bfd_cache_close Buffer Overflow DoS
The vulnerability of the bfdcacheclose function in the bfd/cache.c component of the GNU Binutils development environment is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...
OESA-2023-1797 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in readdescriptors in drivers/usb/core/sysfs.c.CVE-2023-37453 An issue was discovered in the Linux kernel before...
Fedora 39 : open-vm-tools (2023-86a50ffc72)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-86a50ffc72 advisory. Security fixes for CVE-2023-34058 and CVE-2023-34059 Tenable has extracted the preceding description block directly from the Fedora security advisor...
Fedora 37 : open-vm-tools (2023-1ed0ec0035)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-1ed0ec0035 advisory. Security fixes for CVE-2023-34058 and CVE-2023-34059 Tenable has extracted the preceding description block directly from the Fedora security advisor...
Fedora 38 : open-vm-tools (2023-08e2bb6815)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-08e2bb6815 advisory. Security fixes for CVE-2023-34058 and CVE-2023-34059 Tenable has extracted the preceding description block directly from the Fedora security advisor...
kernel: drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()
A memory leak vulnerability was found in the VMware graphics driver vmwgfx in the Linux kernel. In vmwmksstataddioctl, when copying the description string from userspace fails with -EFAULT, the allocated page for the instance descriptor is not freed. This leads to memory leakage that can cause...
kernel: net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
A flaw was found in the Linux kernel's Shared Memory Communications SMC subsystem. A race condition between link group termination and buffer creation can cause the kernel to access an uninitialized memory pointer during message handling. A local user could trigger these conditions to crash the...
kernel: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
An out-of-bounds read vulnerability was found in the SCSI Enclosure Services SES driver in the Linux kernel. The sesenclosuredataprocess function lacks proper bounds checking when processing additional descriptor pointers, allowing reads beyond allocated slab memory when handling malformed...
kernel: Linux kernel: Denial of Service due to file descriptor leak in io_uring with ocfs2
A flaw was found in the Linux kernel. A local user can exploit a file descriptor leak in the iouring subsystem when performing operations on filesystems that do not support nowait buffered read, such as ocfs2. This vulnerability occurs because a file descriptor fget is acquired but not properly...
kernel: gfs2: NULL pointer dereference in gfs2_evict_inode()
A NULL pointer dereference flaw was found in the gfs2 file system in the Linux kernel. This issue occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. This flaw allows a privileged local user to cause ...
kernel: dmaengine: ptdma: check for null desc before calling pt_cmd_callback
AMD PTDMA Pass-Through DMA engine crashes the kernel when ptissuepending encounters empty descriptor queues. The function blindly invokes ptcmdcallback without verifying that a valid descriptor exists, triggering a NULL pointer dereference. This commonly surfaces during system shutdown on AMD...
CVE-2023-30739
Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...
CVE-2023-30739
Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...
CVE-2023-30739
Summary (CVE-2023-30739): The issue is an Arbitrary File Descriptor Write vulnerability in the libsec-ril module. The initial description and corroborating sources indicate the root cause is a write to a file descriptor that can be manipulated by a local attacker, enabling arbitrary code executio...
CVE-2023-28572
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...
Memory corruption
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...
