PT-2024-11826 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential skb leak in the greth init rings function. This function does not free the newly allocated skb when dma mapping error returns an error. To fix this,...

PT-2024-11833 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential memory leak in the otx2 init tc function. If rhashtable init fails, it does not free tc-tc entries bitmap, which is allocated in otx2 tc alloc ent...

PT-2024-11829 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the ipc mux init function. When the allocation of ipc mux-ul adb.pp qlt fails, the ipc mux is not properly...

ASB-A-245242273

In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Pie Register < 3.8.1.3 - Unauthenticated Arbitrary User Deletion

The plugin does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users along with their posts PoC Invoke the following curl command to delete the user user id 2 curl https://example.com/wp-admin/admin-ajax.php...

PT-2025-53031

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the efct device init function within the Linux kernel. Specifically, when efct scsi reg fc transport fails, the efct scsi tgt driver exit function is not called,...

PT-2024-11885 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A resource leak issue has been identified in the Linux kernel, specifically in the iavf init module function. The function fails to destroy the workqueue when pci register driver fails...

The vulnerability of the Item_subselect::init_expr_cache_tracker component in the MariaDB database allows a hacker to trigger a service failure.

The vulnerability of the Itemsubselect::initexprcachetracker component in the MariaDB database system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted SQL...

[SECURITY] Fedora 35 Update: systemd-249.13-6.fc35

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses sock et and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

cloud-init bug fix and enhancement update

An update is available for cloud-init. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...

PT-2022-35528 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.9 through 5.10.149 Description: The issue is related to a refcount leak in the tegra20 clock init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35231 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.39 through 5.15.75 Description: The issue is related to a null pointer access problem that occurs when the sfb init function fails. This problem was introduced in version 2.6.39 and fixed in version 5.15.76. The actu...

PT-2022-35773 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.10 through v4.19.261 Description: A refcount leak was discovered in the tegra114 clock init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.1...

PT-2022-35232 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue is related to a null pointer access in the cake init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2022-35731 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.264 Description: The issue is related to a null pointer access in the cake init function. This problem was introduced in version v4.19 and is fixed in version v4.19.264. The actual impact and attack...

PT-2022-35049 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential memory leak issue was identified in the init mqueue fs function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-35078 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a refcount leak in the tegra210 clock init function. It was introduced in version v4.5 and fixed in version v6.0.3. The actual impact and attack plausibility have not...

PT-2022-35848 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.9 through 4.14.295 Description: A refcount leak was discovered in the tegra20 clock init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.9...

PT-2022-35666 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue is related to a refcount leak in the tegra114 clock init function. It was introduced in version v3.10 and fixed in version v5.4.220. The actual impact and attack plausibility have...

PT-2022-35667 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue is related to a refcount leak in the tegra210 clock init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...