Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability stems from the failure to handle a 32-bit sequence wrap-around when comparing bmseq in stripe batch within md/raid5; as a result, newer bmseq values ma...

Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions prior to 6.12.113, 6.18.56, and 7.2.10. These vulnerabilities stem from improper permission checks in perfeventopen, which fails to enforce kernel analysis permissions during calls to the kernel. As a result, unprivileged users may be able t...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 2.6.25. It arises because the memstick core uses waitforcompletiontimeout in memstickalloccard and memsticksetrwaddr to wait for completion of device identification and address configuration requests. After a timeout, the memstickdev structu...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.0. It stems from opentreeOPENTREENAMESPACE failing to properly handle overwritten mount namespaces when creating copies of them; this may allow unprivileged users to access content within hidden mounts...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 7.2.10. It arises because the cid table of schedext becomes visible to cid kfuncs during modification. Under race conditions, TRACING or SYSCALL programs may read uninitialized entries, potentially leading to memory leaks or...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.15. It stems from mntnotifyadd failing to verify whether a mount is already listed in notifylist; as a result, the same mount may be queued multiple times, leading to subsequent operations accessing memory that has already been...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It arises because pfcpsessionrecv fails to verify that a SEID is located within a linear region prior to reading it. When a short PFCP packet or session header resides within a fragment, this can lead to an out-of-bounds read of packet...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.19. It arises because drmbridgeadd operates bridgelingeringlist without holding a bridgelock, and then performs listempty and listdelinit outside the lock, potentially leading to list corruption...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 2.6.25. It stems from the getresultbuffer function in dm ioctl failing to verify the actual size of the buffer; it sets datastart to sizeofstruct dmioctl. This may result in datastart exceeding the end of the buffer, leading to an...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 5.4.297 up to and including 5.5, from 5.10.241 up to and including 5.11, from 5.15.190 up to and including 5.16, from 6.1.147 up to and including 6.2, from 6.6.100 up to and including 6.6.160, from 6.12.40 up to and including 6.12.113,...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.6. It stems from ath11k failing to reset numstations during hardware startup; multiple hardware reboots subsequently result in the inability to add new stations or mesh peers...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.9. It arises when binding mount/proc/self/fd/ allows pseudo-dentries to become the mount root. During mount traversal, before checking mountlock, the code reads the dseq and dflags of released dentry, potentially leading to use-after-free...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because ntfs3 fails to properly handle block sizes larger than PAGESIZE when using bufferheads; it also fails to handle errors related to setblocksize. During mounting, a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.8. It stems from a flaw in the calculation of page table preallocation size within drivers/gpu/drm/imagination/pvrmmu.c. This flaw fails to accurately determine both the device address range and its endpoints, while also neglecting page...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 2.6.13. It stems from chreadconfig failing to release references obtained via scsidevicelookup, causing scsidevice to remain unreferenced after a device removal. As a result, new devices are rejected, and low-level driver modules cannot be...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.11. It arises because tipctopsrvstop closes subscriber connections while the send and receive work queues of the topology server are still active, potentially leading to use-after-free conditions, execution of queuework on already-destroye...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.4. It stems from improper handling of XSK buffer replenishment retries; under certain conditions where replenishment succeeds, an old buffer pointer may be retained. Subsequent retries then release the active buffer via this stale pointer...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.12. It stems from the gpio xilinx driver’s failure to properly handle the use count of pmruntimegetsync when it fails on an incorrect path, resulting in a runtime power management reference leak. As a consequence, the controller cannot be...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.13. It arises when, after a failure in btrfsuringreadextent, the caller jumps to outacct without releasing iovs, potentially leading to memory leaks...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.19. It arises because ovldomkdir uses %pd to print the input dentry after calling vfsmkdir. When CONFIGOVERLAYFSDEBUG is enabled, this may lead to reuse of freed dentries...