355802 matches found
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the sja1105peroutenable function within the drivers/net/dsa/sja1105/sja1105ptp.c file of the Linux kernel system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the iceresetallvfs function in the drivers/net/ethernet/intel/ice/ice VFlib.c file of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel create_midi2_endpoint() Data Compromise
The vulnerability of the createmidi2endpoint function in the sound/usb/midi2.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the ocfs2readblocks function in the fs/ocfs2/bufferheadio.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the groupprocesstileroom function in the drivers/gpu/drm/panthor/panthorsched.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel pmbus_regulator_notify_worker Heap Buffer Overflow DoS
The vulnerability of the pmbusregulatornotifyworker function in the drivers/hwmon/pmbus/pmbuscore.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of...
Linux kernel RAID1 DoS
The vulnerability in the raid1readrequest function within the drivers/md/raid1.c component of the Linux kernel operating system is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the ieee802154hdrgetaddr function in the net/ieee802154/headerops.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the kfdcriuresumesvm function within the drivers/gpu/drm/amd/amdkfd/kfdsvm.c file of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality,...
Linux kernel xfrm_input_state_lookup Buffer Overflow
The vulnerability of the xfrminputstatelookup function in the net/xfrm/xfrmstate.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibili...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2025-38250)
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix use-after-free in vhciflush syzbot reported use-after-free in vhciflush without repro. 0 From the splat, a thread closed a vhci file descriptor while its device was being used by iotcl on another thread...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46023)
In the Linux kernel, the following vulnerability has been resolved: dm mirror: fix integer overflow in createdirtylog The argument count calculation in createdirtylog performs argsused = 2 + paramcount before validating against argc. When a user provides a paramcount close to UINTMAX via the devi...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2023-54271)
"In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix NULL deref caused by blkgpolicydata being installed before init blk-iocost sometimes causes the following crash: BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... RIP: 0010:rawspinlock+0x17/0x30...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-52928)
In the Linux kernel, the following vulnerability has been resolved: afunix: Reject SIOCATMARK on non-stream sockets SIOCATMARK reports whether the receive queue is at the urgent mark for MSGOOB. In AFUNIX, MSGOOB is supported only for SOCKSTREAM sockets. SOCKDGRAM and SOCKSEQPACKET reject MSGOOB ...
Siemens SIMATIC S7-1500 TM MFP Improper Validation of Specified Index, Position, or Offset in Input (CVE-2026-23388)
In the Linux kernel, the following vulnerability has been resolved: Squashfs: check metadata block offset is within range Syzkaller reports a 'general protection fault in squashfscopydata' This is ultimately caused by a corrupted index look-up table, which produces a negative metadata block offse...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53150)
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tbpropertyentryvalid accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the...
Siemens SIMATIC S7-1500 TM MFP Double Free (CVE-2024-57980)
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvcstatusinit function fails to allocate the inturb, it will free the dev-status pointer but doesn't reset the pointer to NULL. This results in the kfree call in...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31611)
In the Linux kernel, the following vulnerability has been resolved: ksmbd: require 3 sub-authorities before reading subauth2 parsedacl compares each ACE SID against sidunixNFSmode and on match reads sid.subauth2 as the file mode. If sidunixNFSmode is the prefix S-1-5-88-3 with numsubauth = 2 then...
Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2025-21838)
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal devicedel can lead to new work being scheduled in gadget-work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: devicedel...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-58077)
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: don't use socpcmret on .prepare callback commit 1f5664351410 'ASoC: lower 'no backend DAIs enabled for ... Port' log severity' ignores -EINVAL error message on common socpcmret. It is used from many functions,...