CVE-2024-35890

CVE-2024-35890 affects the Linux kernel GRO path: when packets are GROed with fraglist they may be segmented and reused in the stack. The skb objects could be reused as-is after their destructor was removed in skb_gro_receive_list, but the reference to their socket wasn’t removed, preventing prop...

CVE-2024-35890 gro: fix ownership transfer

In the Linux kernel, the following vulnerability has been resolved: gro: fix ownership transfer If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack. In skbsegmentlist those skbs can be reused as-is. This is an issue as their destructor was...

PT-2024-40733 · Pcpp · Pcpp

Name of the Vulnerable Software and Affected Versions: pcpp affected versions not specified Description: The issue is related to a crash in the pcpp library, specifically in the pcpp::IPv6Layer destructor. The crash occurs due to a segmentation fault on an unknown address. Technical details about...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-641-2-g1529b83 release that stems from a denial of service issue in the AP4UnknownAtom::AP4UnknownAtom method of the Ap4Atom.cpp file...

CVE-2021-47060

In the Linux kernel, the following vulnerability has been resolved: KVM: Stop looking for coalesced MMIO zones if the bus is destroyed Abort the walk of coalesced MMIO zones if kvmiobusunregisterdev fails to allocate memory for the new instance of the bus. If it can't instantiate a new bus,...

CVE-2021-47060

CVE-2021-47060 affects the Linux kernel KVM subsystem. The issue arises when unregistering an I/O bus with kvm_io_bus_unregister_dev() fails to allocate memory for a new bus instance, causing unregister_dev() to destroy all devices on the bus except the target device without signaling the caller....

CVE-2021-47060 KVM: Stop looking for coalesced MMIO zones if the bus is destroyed

In the Linux kernel, the following vulnerability has been resolved: KVM: Stop looking for coalesced MMIO zones if the bus is destroyed Abort the walk of coalesced MMIO zones if kvmiobusunregisterdev fails to allocate memory for the new instance of the bus. If it can't instantiate a new bus,...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...

Mozilla: Undefined behavior in <code>ShutdownObserver()</code>

The Mozilla Foundation Security Advisory describes this flaw as: The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor...