2341 matches found
CVE-2024-44960 usb: gadget: core: Check for unset descriptor
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before looking at maxpacket. This fixes a null pointer panic in this case. This may happen if the gadget doesn't properly set up the endpoint for...
The vulnerability of the fastrpc component in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the fastrpc component in the Linux operating system is related to the state of the race in fastrpcmapfind. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
A vulnerability was found in the icebridgesetlink function in the Linux kernel. A missing check to verify whether the nlmsgfindattr function returns NULL or not could lead to a NULL pointer dereference, system instability, or crashes...
The vulnerability of the find_compatible_node() function in the ethtool component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the findcompatiblenode function in the ethtool component of the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2024-33725
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A NULL pointer dereference or path memory leak issue has been identified in the Linux kernel. The problem occurs in the ext4 find extent function when the path is not big enough, and after...
CVE-2024-42782
A SQL injection vulnerability in "/music/ajax.php?action=findmusic" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "search" parameter...
DEBIAN-CVE-2022-48874
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpcmapfind Currently, there is a race window between the point when the mutex is unlocked in fastrpcmaplookup and the reference count increasing fastrpcmapget in fastrpcmapfind,...
UBUNTU-CVE-2022-48874
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpcmapfind Currently, there is a race window between the point when the mutex is unlocked in fastrpcmaplookup and the reference count increasing fastrpcmapget in fastrpcmapfind,...
Kashipara Music Management System 安全漏洞
Kashipara Music Management System is a music management system from Kashipara. Kashipara Music Management System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the search parameter of /music/ajax.php?action=findmusic against external SQL input,...
PT-2024-30154 · Unknown · Kashipara Music Management System
Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A SQL injection issue in the "/music/ajax.php?action=find music" endpoint allows an attacker to execute arbitrary SQL commands via the search parameter. This enables the attacker to...
SUSE CVE-2024-43828
In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying fastcommit When doing fastcommit replay an infinite loop may occur due to an uninitialized extentstatus struct. ext4extdetermineinserthole does not detect the replay and calls...
PT-2024-40894
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves several functions: cups array find, cupsArrayFind, and...
kernel: virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
No description is available for this CVE...
kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
A vulnerability was found in the icebridgesetlink function in the Linux kernel. A missing check to verify whether the nlmsgfindattr function returns NULL or not could lead to a NULL pointer dereference, system instability, or crashes...
kernel: net/smc: fix neighbour and rtable leak in smc_ib_find_route()
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix neighbour and rtable leak in smcibfindroute In smcibfindroute, the neighbour found by neighlookup and rtable resolved by iprouteoutputflow are not released or put before return. It may cause the refcount leak, so fix...
PT-2024-38380
Name of the Vulnerable Software and Affected Versions Microchip Advanced Software Framework versions through 3.52.0.2574 Description The issue is related to an Improper Input Validation vulnerability in the Microchip Technology Advanced Software Framework example DHCP server, which can cause remo...
The vulnerability of the parse_btf_field() function in the Linux kernel debugging subsystem allows a attacker to cause a service failure.
The vulnerability of the parsebtffield function in the kernel/trace/traceprobe.c module of the Linux kernel’s tracing subsystem is related to improper code validation for the btffindstructmember function’s return value. Exploiting this vulnerability could allow an attacker to trigger a service...
PT-2024-31338
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description A memory leak vulnerability has been resolved in the Linux kernel. The issue occurs in the bcm sf2 mdio register function, which calls of phy find device and then phy device remove in a loop to...
ROS-20240806-06
Vulnerability of ruby-find-library-file function of EMACS text editor is related to incorrect neutralization of special elements. neutralization of special elements. Exploitation of the vulnerability could allow an attacker to execute arbitrary code Vulnerability in the lib-src/etags.c file of th...
