The vulnerability of the queue_oob() function in socket implementations for kernels AF_UNIX in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the queueoob function in the net/unix/afunix.c module, which is part of the AFUNIX socket implementation in Linux operating systems, relates to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability can allow an...

The vulnerability of the _rtl92e_pci_disconnect() function in the wireless adapter driver from RealTek RTL8192E’s Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rtl92epcidisconnect function in the drivers/staging/rtl8192e/rtl8192e/rtlcore.c file of the Linux kernel’s wireless adapter driver RealTek RTL8192E is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the f2fs_read_multi_pages() function in the f2fs file system of Linux kernels allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f2fsreadmultipages function in the fs/f2fs/data.c file of the Linux kernel’s file system f2fs is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the liteuartremove() function in the LiteUART driver of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the liteuartremove function in the drivers/tty/serial/liteuart.c file of the Linux kernel’s LiteUART driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the nvme_tcp_io_work() function in the Linux operating system’s NVMe driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nvmetcpiowork function in the drivers/nvme/host/tcp.c file of the Linux NVMe kernel driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the tipc_bufAppend() function in the implementation of the Transparent Inter-Process Communication (TIPC) protocol in the Linux operating system allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tipcbufAppend function in the net/tipc/msg.c module of the Linux operating system’s Transparent Inter-Process Communication TIPC protocol implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker...

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory...

Use After Free

github.com/envoyproxy/envoy is vulnerable to a use-after-free. The vulnerability is due to QUICHE continuing to push request headers after the StopReading method is called on the stream, which can lead to accessing a destroyed HCM ActiveStream object. This allows attackers to disrupt service by...

VulnCheck KEV: CVE-2024-4610

Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory...

PT-2024-29244

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, where references to freed memory in the ASoC topology module are incorrect. Most users release memory used by a topology file after parsing it,...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a system crash when an incorrect pointer is allocated from automatically freed memory...

The vulnerability of the smb2_reconnect_server() function in the Linux kernel-based SMB protocol client implementation allows a hacker to cause a service failure.

The vulnerability of the smb2reconnectserver function in the fs/smb/client/smb2pdu.c module of the SMB protocol client implementation in Linux operating systems is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the is_valid_oplock_break() function in the client implementation of the SMB protocol in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the isvalidoplockbreak function in the fs/smb/client/misc.c module of the SMB client implementation in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cifs_signal_cifsd_for_reconnect() function in the Linux kernel’s SMB client implementation allows a hacker to cause a service failure.

The vulnerability of the cifssignalcifsdforreconnect function in the fs/smb/client/connect.c module of the SMB protocol client implementation in Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerability of the sev_mem_enc_register_region() function in the Linux operating system’s KVM kernel component, which allows a hacker to cause a service failure

The vulnerability of the sevmemencregisterregion function in the arch/x86/kvm/svm/sev.c module of the Linux kernel’s KVM component is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rk_hash_run() function in the Rockchip kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rkhashrun function in the drivers/crypto/rockchip/rk3288cryptoahash.c file of the Rockchip cryptographic driver for the Linux operating system is related to the re-use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the check_kprobe_address_safe() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the checkkprobeaddresssafe function in the kernel/kprobes.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to trigger a service failure...

CLSA-2024-1716981167 Fix of 17 CVEs

CVE-url: https://ubuntu.com/security/CVE-2022-48673 - net/smc: Fix possible access to freed memory in link clear CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client:...

F5 Nginx 安全漏洞

NGINX is an HTTP and reverse proxy server, email proxy server and general purpose TCP/UDP proxy server. An information disclosure vulnerability exists in F5 NGINX Plus and NGINX Open Source, which can be exploited by an unauthenticated, remote attacker to gain access to previously freed memory...

The vulnerability of the PuTTY encryption protection mechanism, related to the access to free memory cells, allows a hacker to cause a service failure.

The vulnerability of the PuTTY encryption method is related to the access to cells in the freed memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service disconnection using the SSH1MSGDISCONNECT message...