Multiple Arm Products Security Vulnerabilities

ARM Midgard GPU Kernel Driver is a Mali GPU device driver from ARM UK. A security vulnerability exists in several Arm products. An attacker exploiting this vulnerability could obtain sensitive data from previously freed memory. The following products and versions are affected: Midgard GPU Kernel...

The vulnerability of the ext4_es_insert_extent() function in the fs/ext4/extents_status.c driver of the Linux file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4 file system driver in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the radix_tree_lookup() function in the lib/radix-tree.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the radixtreelookup function in the lib/radix-tree.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2023-33200

A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

CVE-2023-33200

A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

CVE-2023-34970

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

CVE-2023-34970 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

CVE-2023-34970 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

CVE-2023-4211

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory...

ARM Mali GPU Kernel Driver Resource Management Error Vulnerability

The ARM Mali GPU Kernel Driver is a driver for a graphics processor unit from ARM UK. The ARM Mali GPU Kernel Driver suffers from a resource management error vulnerability that originates from a local, unprivileged user being able to perform incorrect GPU memory handling operations to access free...

DEBIAN-CVE-2023-4813

A flaw has been identified in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with...

CVE-2023-4813

A flaw has been identified in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with...

glibc Resource Management Error Vulnerability

glibc GNU C Library is a C standard library implemented by a GNU project of the GNU community. A resource management error vulnerability exists in glibc, which stems from the fact that when an NSS module implements only the nssgethostbyname2r hooks but not the nssgethostbyname3r hooks, the...

PT-2023-8453

Name of the Vulnerable Software and Affected Versions glibc affected versions not specified Description A flaw was found in glibc, where the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements...

The vulnerability of the do_mbind() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dombind function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attacker to...

PT-2023-28274 · Arm · Arm Mali Gpu Kernel Driver

Name of the Vulnerable Software and Affected Versions: Arm Mali GPU Kernel Driver versions affected versions not specified Description: A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. The issue is currently under active...

The vulnerability of the btrfs_get_root_ref() function in the fs/btrfs/disk-io.c file of the Linux kernel’s file system allows a attacker to cause a service failure or gain access to protected information.

The vulnerability of the btrfsgetrootref function in the fs/btrfs/disk-io.c file of the Linux kernel’s file system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...

The vulnerability of the `btrfs_get_dev_args_from_path()` function in the `fs/btrfs/volumes.c` file of the Linux kernel’s file system allows a privileged attacker to compromise the confidentiality, integrity, and accessibility of protected information, or cause service failures.

The vulnerability of the btrfsgetdevargsfrompath function in the fs/btrfs/volumes.c file of the btrfs file system in the Linux kernel is related to the use of previously freed memory. Exploiting this vulnerability could allow a person with elevated privileges to compromise the confidentiality,...

The vulnerability of the vmxnet3_rq_alloc_rx_buf() function in the drivers/net/vmxnet3/vmxnet3_drv.c driver of the vmxnet3 kernel of the Linux operating system allows a attacker to access protected information or cause a service failure.

The vulnerability of the vmxnet3rqallocrxbuf function in the drivers/net/vmxnet3/vmxnet3drv.c driver of the Linux operating system’s kernel is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker to access protected information or cause service...

The vulnerability of the net/sched component in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, or to enhance their privileges.

The vulnerability of the net/sched component of the Linux operating system’s kernel is related to the repeated use of previously freed memory in the function fwchange within the net/sched/clsfw.c module, as well as the use of u32initknode in net/sched/clsu32 and route4change in...