Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2023-3298)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-5427

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory.This issue affects Bifrost...

CVE-2023-5427 Mali GPU Kernel Driver allows improper GPU processing operations

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory.This issue affects Bifrost...

ARM Mali GPU Driver Resource Management Error Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. A security vulnerability exists in ARM Mali GPU Driver that stems from the presence of a memory reuse after release issue. An attacker can exploit the vulnerability to perform incorrect GPU processing operations to gain access to freed memory. T...

cups: use-after-free in cupsdAcceptClient() in scheduler/client.c

A vulnerability was found in CUPS. This issue occurs due to logging data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data immediately before the connection closed, resulting in a use-after-free in cupsdAcceptClient in scheduler/client...

CVE-2023-4272

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

CVE-2023-4272

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

CVE-2023-4295

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory...

CVE-2023-3889

A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory...

CVE-2023-3889 Mali GPU Kernel Driver exposes sensitive data from freed memory

A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory...

CVE-2023-3889 Mali GPU Kernel Driver exposes sensitive data from freed memory

A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory...

CVE-2023-4272 Mali GPU Kernel Driver exposes sensitive data from freed memory

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

CVE-2023-4272 Mali GPU Kernel Driver exposes sensitive data from freed memory

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

CVE-2023-4272

CVE-2023-4272 affects ARM Mali GPU kernel drivers (Midgard, Bifrost, Valhall families) exposing sensitive data from freed memory via local GPU processing operations. Public documents link Mali kernel-driver variants (r8p0–r32p0, r0p0–r41p0, etc.) and describe the vulnerability as local with low a...

kernel: Linux kernel: Denial of Service in iwlwifi due to NULL pointer dereference

A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability allows a local attacker with low privileges to cause a denial of service DoS by triggering a NULL pointer dereference. This occurs when the iwlpciprobe function fails and frees a transaction structure, but the iwlpciremove...

cups: use-after-free in cupsdAcceptClient() in scheduler/client.c

A vulnerability was found in CUPS. This issue occurs due to logging data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data immediately before the connection closed, resulting in a use-after-free in cupsdAcceptClient in scheduler/client...

Multiple Arm Products Security Vulnerabilities

ARM Midgard GPU Kernel Driver is a Mali GPU device driver from ARM UK. A security vulnerability exists in several Arm products. An attacker exploiting this vulnerability could obtain sensitive data from previously freed memory. The following products and versions are affected: Midgard GPU Kernel...

The vulnerability of the ext4_es_insert_extent() function in the fs/ext4/extents_status.c driver of the Linux file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4 file system driver in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the radix_tree_lookup() function in the lib/radix-tree.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the radixtreelookup function in the lib/radix-tree.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2023-34970

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...