147 matches found
CVE-2024-27063 leds: trigger: netdev: Fix kernel panic on interface rename trig notify
In the Linux kernel, the following vulnerability has been resolved: leds: trigger: netdev: Fix kernel panic on interface rename trig notify Commit d5e01266e7f5 "leds: trigger: netdev: add additional specific link speed mode" in the various changes, reworked the way to set the LINKUP mode in commi...
CVE-2024-27063: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: leds: trigger: netdev: Fix kernel panic on interface rename trig notify Commit d5e01266e7f5 "leds: trigger: netdev: add additional specific link speed mode" in the various changes, reworked the way to set the LINKUP mode in commi...
PT-2024-29760
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Linux kernel versions prior to 6.6.43 Description The issue in the Linux kernel is related to the use of mutex initialization in the LEDs driver. The driver registers LEDs using devm led classdev...
PT-2024-29761
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the use of mutex initialization in the Linux kernel's leds: mlxreg driver. LEDs are registered using devm led classdev register, which automatically unregisters...
PT-2024-7845
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a kernel panic that occurs when renaming an interface, specifically due to a problem in the leds: trigger: netdev component. The logic change in the implementatio...
CLSA-2024-1706617379 Fix of 12 CVEs
Jammy update: v5.15.140 upstream stable release LP: 2050038 // CVE-url: https://ubuntu.com/security/CVE-2024-0607 - netfilter: nftables: fix pointer math issue in nftbyteordereval CVE-url: https://ubuntu.com/security/CVE-2024-0607 - netfilter: nftables: Introduce new 64-bit helper register...
kernel: ALSA: hda: Fix UAF of leds class devs at unbinding
A use-after-free vulnerability has been identified in the Linux kernel, specifically related to a stale setbrightnessdelay callback function. This flaw can lead to compromised system availability. Due to the nature of use-after-free vulnerabilities, successful exploitation could result in...
PT-2024-11889
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out-of-bounds read in the afe4404 read|write raw function. A KASAN report indicates a global-out-of-bounds read in afe4404 read raw+0x2ce/0x380. The bug is...
kernel: ALSA: hda: Fix UAF of leds class devs at unbinding
A use-after-free vulnerability has been identified in the Linux kernel, specifically related to a stale setbrightnessdelay callback function. This flaw can lead to compromised system availability. Due to the nature of use-after-free vulnerabilities, successful exploitation could result in...
GSD-2022-1000572 ALSA: hda: Fix UAF of leds class devs at unbinding
ALSA: hda: Fix UAF of leds class devs at unbinding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...
PT-2022-28928
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.8 Description The issue concerns a use-after-free UAF flaw related to the leds class devices at unbinding in the hda module of the ALSA Advanced Linux Sound Architecture subsystem. The actual impact and...
PT-2022-28846
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description The issue is related to a use-after-free UAF flaw in the leds class devs at unbinding. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
GSD-2022-1000218 ALSA: hda: Fix UAF of leds class devs at unbinding
ALSA: hda: Fix UAF of leds class devs at unbinding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...
PT-2022-28496
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue is related to a use-after-free UAF flaw in the leds class devs at unbinding. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:2687-1 Rating: important References: 1065729 1085224 1094840 1113295 1152472 1152489 1153274 1154353 1155518 1156395 1170511 1176447 1176940 1179243 1180092 1180814 1183871 1184114 1184350 1184631...
CVE-2019-13991
Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs directly connected to GPIO pins via a laser, because of LED photosensitivity...
Code injection
Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs directly connected to GPIO pins via a laser, because of LED photosensitivity...
CVE-2019-13991
CVE-2019-13991 affects embedded Arduino-based systems before Rev3, where a remote attacker can send data to LEDs connected directly to GPIO pins via a laser due to LED photosensitivity. The connected records consistently describe the vulnerability as a remote-access data delivery path to on-board...
PT-2019-13515
Name of the Vulnerable Software and Affected Versions Arduino versions prior to Rev3 Description The issue allows remote attackers to send data to LEDs directly connected to GPIO pins via a laser, due to LED photosensitivity. Recommendations For Arduino versions prior to Rev3, consider using...
