The vulnerability of the veth component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the veth component in the Linux operating system’s kernel is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly initializing the bits of the MANAGEPAGES command when initializing the command mask...

CVE-2024-47728 bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero former ARGPTRTOLONG,INT args in case of error For all non-tracing helpers which formerly had ARGPTRTOLONG,INT as input arguments, zero the value for the case of an error as otherwise it could leak memory. For tracing, i...

The vulnerability of the seqpacket_allow() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the seqpacketallow function in the Linux operating system’s kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2024-46697: Improper Initialization

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that nfsd4fattrargs.context is zeroed out If nfsd4encodefattr4 ends up doing a "goto out" before we get to checking for the security label, then args.context will be set to uninitialized junk on the stack, which we'l...

CVE-2024-45018: Improper Initialization

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack before use Fix missing initialisation of extack in flow offload...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to properly initialize fields of the hfsinodeinfo structure...

CVE-2023-48361

Improper initialization in firmware for some IntelR CSME may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-48361: Improper Initialization

Improper initialization in firmware for some IntelR CSME may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-21807: Improper Initialization

Improper initialization in the Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-6365 · Intel · Intel Ethernet Network Controllers/Adapters

Name of the Vulnerable Software and Affected Versions: Linux kernel mode driver for Intel Ethernet Network Controllers and Adapters versions prior to 28.3 Description: The issue is related to improper initialization and insecure privilege management in the Linux kernel mode driver for Intel...

CVE-2023-40261: Improper Initialization

Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's har...

CVE-2024-39864: Improper Initialization

The CloudStack integration API service allows running its unauthenticated API server usually on port 8096 when configured and enabled via integration.api.port global setting for internal portal integrations and for testing purposes. By default, the integration API service port is disabled and is...

CVE-2024-39485: Improper Initialization

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Properly re-initialise notifier entry in unregister The notifierentry of a notifier is not re-initialised after unregistering the notifier. This leads to dangling pointers being left there so use listdelinit to...

CVE-2024-38558: Improper Initialization

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVSPACKETCMDEXECUTE has 3 main attributes: - OVSPACKETATTRKEY - Packet metadata in a netlink format. - OVSPACKETATTRPACKET - Binary packet content. -...

eap-galleon: custom provisioning creates unsecured http-invoker

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server...

PT-2024-9011

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.37 Description: The issue is related to the mptcp component of the Linux kernel, where the snd nxt variable is not properly initialized on connect, leading to potential corruption of snd una values. When...

CVE-2023-45315

Improper initialization in some IntelR Power Gadget software for Windwos all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-45315

The CVE-2023-45315 issue affects Intel Power Gadget software for Windows (all versions). It is caused by improper initialization in the Power Gadget component, which may allow an authenticated user to trigger a local denial-of-service condition. The vulnerability is documented across multiple sou...

PT-2024-13237

Name of the Vulnerable Software and Affected Versions IntelR Power Gadget software for Windows affected versions not specified Description The issue is related to improper initialization in the IntelR Power Gadget software, which may allow an authenticated user to potentially enable denial of...