218 matches found
Linux net/hsr/hsr_forward.c Heap Buffer Overflow DoS
The vulnerability of the fillframeinfo function in the net/hsr/hsrforward.c module of the Linux operating system is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
UBUNTU-CVE-2023-53128
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix throttlegroups memory leak Add a missing kfree...
UBUNTU-CVE-2023-53119
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: initialize struct pn533outarg properly struct pn533outarg used as a temporary context for outurb is not initialized properly. Its uninitialized 'phy' field can be dereferenced in error cases inside pn533outcomplete...
CVE-2022-49861 dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
In the Linux kernel, the following vulnerability has been resolved: dmaengine: mvxorv2: Fix a resource leak in mvxorv2remove A clkprepareenable call in the probe is not balanced by a corresponding clkdisableunprepare in the remove function. Add the missing call...
Linux kernel RCE
The vulnerability of the cleanupsrcustruct function in the kernel/rcu/srcutree.c sub-system of the synchronization mechanism in Linux multi-threaded kernel systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
Linux Kernel Trace Buffer Overflow DoS
The vulnerability of the traceactioncreate function in the kernel/trace/traceeventshist.c module, which supports kernel tracing in Linux operating systems, is related to improper memory release before deleting the last reference a “memory leak”. Exploiting this vulnerability could allow an attack...
Linux Heap Buffer Overflow DoS
The vulnerabilities of the functions sofipc4widgetsetupcompdai and sofipc4preparecopiermodule sound/soc/sof/ipc4-topology.c in the Linux kernel are related to the assignment of zero pointers. Exploiting these vulnerabilities could allow an attacker to cause a service failure...
Linux kernel wwan_rtnl_link_ops Buffer Overflow
The vulnerability described in the structure of wwanrtnllinkops within the drivers/net/wwan/wwancore.c file of the Linux kernel relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of protected...
DEBIAN-CVE-2025-21875
In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a lockdep splat in the PM control path: WARNING: CPU: 0 PID: 6693 at ./include/net/sock.h:1711 sockownedbyme include/net/sock.h:1711 inline WARNING: CP...
Linux kernel clk Heap Buffer Overflow DoS
The vulnerability of the raspberrypidiscoverclocks function in the clk component of the Linux operating system’s kernel is related to read misses beyond the boundary. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Memory Management Heap Buffer Overflow DoS
The vulnerability of the zswapshrinkercount function in the mm/zswap.c module of the Linux kernel’s memory management subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
Linux RISCV PMU SBI Set Scounteren DoS
The vulnerability of the pmusbisetscounteren function in the drivers/perf/riscvpmusbi.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
SUSE CVE-2023-52927
In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nfctfindexpectation Currently nfconntrackin calling nfctfindexpectation will remove the exp from the hash table. However, in some scenario, we expect the exp not to be removed when the...
SUSE CVE-2024-58060
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject structops registration that uses module ptr and the module btfid is missing There is a UAF report in the bpfstructops when CONFIGMODULES=n. In particular, the report is on tcpcongestionops that has a "struct module...
CVE-2024-58070 bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
In the Linux kernel, the following vulnerability has been resolved: bpf: bpflocalstorage: Always use bpfmemalloc in PREEMPTRT In PREEMPTRT, kmallocGFPATOMIC is still not safe in non preemptible context. bpfmemalloc must be used in PREEMPTRT. This patch is to enforce bpfmemalloc in the...
SUSE CVE-2025-21716
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in vxlanvnifilterdump KMSAN reported an uninit-value access in vxlanvnifilterdump 1. If the length of the netlink message payload is less than sizeofstruct tunnelmsg, vxlanvnifilterdump accesses bytes beyo...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the clocksourceverifychoosecpus function calling getrandomu32 in an atomic context, which could result in a...
Linux kernel amdgpu_cs_pass1 Heap Buffer Overflow DoS
The vulnerability of the amdgpucspass1 function in the Linux kernel’s drivers/gpu/drm/amd/amdgpu/amdgpucs.c file is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...
AZL-54788 CVE-2024-56662 affecting package kernel for versions less than 5.15.176.3-1
In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpinfitctl Fix an issue detected by syzbot with KASAN: BUG: KASAN: vmalloc-out-of-bounds in cmdtofunc drivers/acpi/nfit/ core.c:416 inline BUG: KASAN: vmalloc-out-of-bounds in...
AZL-54090 CVE-2024-53141 affecting package kernel for versions less than 5.15.176.3-1
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmapipuadt When tbIPSETATTRIPTO is not present but tbIPSETATTRCIDR exists, the values of ip and ipto are slightly swapped. Therefore, the range check for ip should be done later, but...