CVE-2022-48673 net/smc: Fix possible access to freed memory in link clear

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifying the QP to the Error state, all RX WR would be completed with WC in IBWCWRFLUSHERR status. Current implementation does not wait for it is done, but destroy...

CVE-2022-48673

CVE-2022-48673 affects the Linux kernel net/smc implementation. Root cause: after modifying a QP to Error, the code completes RX work with IB_WC_WR_FLUSH_ERR but destroys the QP and frees the link group without waiting for the tasklet to finish, risking access to freed memory in tasklet context. ...

CVE-2022-48673

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifying the QP to the Error state, all RX WR would be completed with WC in IBWCWRFLUSHERR status. Current implementation does not wait for it is done, but destroy...

CVE-2023-6363

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn could give them...

CVE-2024-1395

Use After Free vulnerability in Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory. This...

CVE-2023-6363

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn could give them...

CVE-2024-1395

CVE-2024-1395 affects ARM Mali GPU Kernel Driver (Arm 5th Gen GPU Architecture) with affected revisions r41p0–r47p0. Description: Use-after-free in GPU memory processing allows a local non-privileged user to access already freed memory. Impact and exploitability: local escalation of privileges vi...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from accessing freed memory in a link clear...

CVE-2024-1065

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects...

SUSE CVE-2024-26859

In the Linux kernel, the following vulnerability has been resolved: net/bnx2x: Prevent access to a freed page in pagepool Fix race condition leading to system crash during EEH error handling During EEH error recovery, the bnx2x driver's transmit timeout logic could cause a race condition when...

Arm Mali GPU Kernel Drive 资源管理错误漏洞

The ARM Bifrost GPU Kernel Driver and Valhall GPU Kernel Driver are both products of ARM UK.The Bifrost GPU Kernel Driver is a Bifrost GPU kernel driver.The Valhall GPU Kernel Driver is an ARM Bifrost GPU kernel driver. Valhall GPU Kernel Driver is a Valhall GPU kernel driver. A security...

Arm Mali GPU Kernel Driver 安全漏洞

ARM Midgard GPU Kernel Driver and others are products of ARM UK.Midgard GPU Kernel Driver is a Mali GPU device driver.Bifrost GPU Kernel Driver is a Bifrost GPU kernel driver.Valhall GPU The Valhall GPU Kernel Driver is a Valhall GPU kernel driver. A security vulnerability exists in the Arm Mali...

cups: use-after-free in cupsdAcceptClient() in scheduler/client.c

A vulnerability was found in CUPS. This issue occurs due to logging data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data immediately before the connection closed, resulting in a use-after-free in cupsdAcceptClient in scheduler/client...

Vulnerability of microprogramming software for Intel, AMD, ARM, and IBM processors: This vulnerability arises due to the creation of racing states in a speculative mode, which can lead to access to already freed memory areas. If the processor mispredicts the branching in the code, it allows a hacker to gain access to protected memory.

The vulnerability of microprogramming software for processors from Intel, AMD, ARM, and IBM arises from the existence of speculative execution states that can lead to access to already freed memory areas, if the processor mispredicts branch instructions in the code. Exploiting this vulnerability...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-1268)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the pvr2_context_disconnect() function in the drivers/media/usb/pvrusb2/pvrusb2-context.c file of the Hauppauge WinTV-PVR USB2 driver for the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pvr2contextdisconnect function in the drivers/media/usb/pvrusb2/pvrusb2-context.c file of the Hauppauge WinTV-PVR USB2 driver’s Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the UHCI controller in VMware ESXi, Workstation, Fusion, and Cloud Foundation software allows a attacker to execute arbitrary code.

The vulnerability of the UHCI-based USB controller in VMware ESXi, Workstation, Fusion, and Cloud Foundation software products is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CLSA-2024-1708638685 Fix CVE(s): CVE-2023-4806, CVE-2023-4813

SECURITY UPDATE: A flaw fixed when the getaddrinfo function may access memory that has been freed, resulting in an application crash - debian/patches/any/CVE-2023-4806.patch: fix the flaw - CVE-2023-4806 SECURITY UPDATE: In an uncommon situation, the gaihinet function may use memory that has been...

PT-2024-3854

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a race condition in the skb queue empty function, where the receive queues are protected by their respective spin-lock, not the socket lock. This could lead to sk...

The vulnerability of the IGMPv2 protocol implementation in the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the IGMPv2 protocol implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to gain access to protected information...