Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.2. It arises because ioconnectbpfpopulate fills the CONNECT filter field only when addrlen is at least 28 bytes; however, IPv6 connection paths accept addresses with a SIN6LENRFC2133 value of 24 bytes. When addrlen is 24, the filter sees n...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.7. It stems from the use of a user-writable TPA register in handleexception within RISC-V entry handling to determine whether an exception originates from user space. Attackers can manipulate this register to cause the kernel to bypass...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.11. It stems from gpioexarprobe failing to save allocated IDs prior to performing registration cleanup; as a result, ID 0 is released upon registration failure. This may lead to the leakage of allocated IDs and subsequent release of ID 0 f...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.143, from 6.12.93 up to 6.12.112, from 6.18.17 up to 6.18.55, from 6.19.7 up to 6.20, and version 7.0. This vulnerability arises because ioremapprot on ARM64 architecture fails to reject protection values lacking PTEUSER; as a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 5.15.222 through 5.16. It arises because ksmbdsessionsderegister fails to remove stale channels from all sessions when a connection is dropped, resulting in post-release reuse of freed ksmbdconn objects and subsequent session leaks...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises when the maxsegs value provided by the host driver is excessively large and then truncated to zero; as a result, mmcallocsg attempts to allocate memory of...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because nfconntrackexpect fails to clear memory upon allocation, potentially allowing uninitialized data to be leaked into user space via...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.12.111 and prior to 6.18.53. This vulnerability arises because lan966xfdmareload fails to restore rx-pageorder and rx-maxmtu upon failure to reload, as well as fails to restore the old page pool registration for XDP RXQs on each...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.6. It arises when, without a valid send port, original skb data is not freed during broadcast transmission. As a result, memory allocated for the skb and its socket cannot be released, potentially leading to memory leaks...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.17. It stems from xei2cremove failing to cancel the i2c-work work item; after adapter deregistration, it still accesses the freed adapter and invokes callbacks, potentially leading to use-after-free conditions...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 2.6.13. It stems from emtextchange failing to verify whether the algo array ends with NUL before passing it to textsearchprepare, potentially leading to out-of-bounds reads and kernel memory leaks...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.18. It arises from the failure to hash dentrys prior to their detachment, resulting in a race condition between detachmounts and ddelete. This may expose the contents of hidden files mounted on the system...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.8. It stems from pvrvmgpuvaremap within drm/imagination failing to release GEM references obtained from split parts when remapping occurs. These split parts are then incorrectly linked to vmbo of a new object, resulting in reference leaks...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises when the hot work queue remains initialized despite being disabled via the amdgpu.dpm=0 module parameter; this can lead to system anomalies or...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.15. It stems from bonding failing to release old BPF program references when replacing XDP, potentially leading to BPF program leakage...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 4.1.40 up to 4.2, from 4.4.54 up to 4.5, from 4.9.15 up to 4.10, from 4.10.3 up to 4.11, and in version 4.11. This vulnerability arises because the Linux kernel’s namespace fails to check reference counts prior to unmounting child moun...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.6. It stems from a race condition wherein strprecv is not guaranteed to stop running prior to strpdone removing the parser. This may lead to use-after-free issues...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.13. It stems from riscv futex failing to remove user pointers from labels prior to atomic access; as a result, atomic operations target unvalidated tagged addresses. This may allow non-privileged processes to perform atomic read-modify-wri...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.13. It stems from a failure to call hfreelogicallan when the RX buffer pool allocation fails after ibmvethopen registers a logical LAN; as a result, PHYP retains ownership of the page during the unmapping of the buffer list page...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.9. It arises when IPv4 FIB dumps are concurrently executed alongside nexthop replacement; no check is performed to verify whether an index path exists. As a result, fibinfonhc may return NULL and be dereferenced via nhcflags, leading to a...