Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.6. It stems from an abnormal creation of FIB next hop exception FNHE when the kernel matches existing sockets for ICMP fragments that are locally delivered and referenced as UDP packets. This may allow off-chain attackers to bypass FNHE...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 7.2.9. It stems from the lack of checks on empty stream-sink values within the DPMS sequence before dereferencing, potentially leading to null pointer dereferencing...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 6.6.79 up to 6.6.160, from 6.12.16 up to 6.12.113, from 5.15.179 up to 5.16, from 6.1.129 up to 6.2, and specifically in version 6.13. This vulnerability arises because PMTU traversal is not halted when the nexthop group contracts; as ...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability stems from the hwsimtxinfoframereceivednl function failing to validate the length of the HWSIMATTRTXINFO property; short or zero-length properties are...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.18.53. This vulnerability arises because the iwlwifi mld driver triggers a WARNON condition even when it is configured for WoWLAN but remains suspended and unconnected to the network, without proper netdetect configuration. This...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.16. It stems from amdgpuuserqgetdoorbellindex failing to verify whether an incoming BO is placed within the doorbell domain; this may result in a regular BO being fixed into the doorbell domain, causing its contents to be lost...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.158, 6.12.111, and 6.18.53. This vulnerability stems from improper handling of states by ksmbd during interruption level-II and when processing lease termination confirmations. As a result, it may skip over valid lease states...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 4.0.2 through 4.1. It arises because clonemnt fails to disable MNTUMOUNT when copying mount flags; as a result, delayed unmounts still retain their mount flags after being copied. This can lead to reference count errors, mount point leaks,...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.13. It stems from the fact that btrfs fails to always return -EIOCBQUEUED after btrfsuringreadextentendio. When all bio operations are completed prior to btrfsencodedreadregularfillpages returning, a negative errno is returned. This result...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.0. It stems from padding holes in the pending member of struct rtcwkalrm. When user space is accessed via the RTCWKALRMRD ioctl, uninitialized kernel stack data within these holes may be leaked, resulting in information disclosure...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.0; it arises when performing a Store Status operation while holding a spinlock, potentially writing to user space and causing a crash...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.0. It stems from damonptepmkold failing to use page-aligned addresses, causing PTEAF entries outside sampled pages to be cleared during page table traversal and subsequent out-of-bounds writes. This may lead to a kernel crash or memory...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.16. It stems from openvswitch’s ovsflowcmddump function, which repeatedly releases stats-lock via spinunlockbh during netlink flow table dumps. This causes the dump thread to continuously process a backlog of soft interrupts without being...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 5.15.209 up to and including 5.16, from 6.1.175 up to and including 6.2, from 6.6.141 up to and including 6.7, from 6.12.91 up to and including 6.13, from 6.18.33 up to and including 6.19, from 7.0.10 up to and including 7.1, and in...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 3.10.83 up to but not including 3.11, from 3.12.45 up to but not including 3.13, from 3.14.47 up to but not including 3.15, and from 3.18.19 up to but not including version 3.19. This vulnerability arises because btrfssetxattr in Btrfs...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 4.19.299 through 4.20 and 5.1. It arises because smcgetname dereferences smc-clcsock without holding a clcsockreleaselock; this allows the link group to asynchronously release CLC sockets, potentially leading to use-after-free conditions or...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because cpswprobe registers devlink before registering a CPSW port; if port registration fails, it does not unregister the previously registered...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.16. It arises when cgroup/cpuset handles CPU hotplug races; under such conditions, guaranteeactivecpus may trigger a null pointer dereference due to the absence of active CPUs within the top cpuset...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It stems from the fact that panthorioctlgroupcreate only validates the number of user-space queues against a hard-coded maximum value, without checking the actual number of slots initialized by the firmware. As a result, when...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.0; it stems from pwrseq-pcie-m2.c failing to release the consumers array allocated by ofregulatorbulkgetall, potentially leading to a memory leak...