17408 matches found
kernel: drm/amdgpu: use-after-free vulnerability
A failure flaw was found in the Linux kernel’s AMDGPU driver in how a user sends ioctl with an invalid address and size when using the AMD GPU. This flaw allows a local user to crash the system...
kernel: mptcp: pm: Fix uaf in __timer_delete_sync
A use-after-free flaw was found in the Linux kernel’s Multipath TCP MPTCP subsystem. This flaw allows a local user to crash or potentially escalate their privileges on the system...
aeon-check 安全漏洞
aeon-check is an open source tool from openSUSE. A security vulnerability exists in aeon-check that stems from an insecure way of creating temporary files, which allows a local user on a non-default-configured system to cause a denial of service or to set the encryption key for the file system...
intel-microcode: Race conditions in some Intel(R) Processors
A flaw was found in intel-microcode. The hardware logic contains race conditions in some IntelR processors that may allow an authenticated user to enable partial information disclosure via local access...
kernel: Linux kernel: Denial of Service in dvb-usb-v2 gl861 due to null-pointer dereference
A flaw was found in the Linux kernel's dvb-usb-v2 gl861 module. A local user could exploit this null-pointer dereference vulnerability by providing specially crafted input to the gl861i2cmasterxfer function. This could lead to a system crash, resulting in a Denial of Service DoS...
kernel: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance
A flaw was found in the Linux kernel's HDA driver before initialization. This issue occurs when a user unloads and then reloads the module, and could allow a local user to crash the system...
kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
A deadlock flaw was found in the Linux kernel’s pinctrl subsystem. This flaw allows a local user to crash the system...
kernel: drm/amdgpu: use-after-free vulnerability
A failure flaw was found in the Linux kernel’s AMDGPU driver in how a user sends ioctl with an invalid address and size when using the AMD GPU. This flaw allows a local user to crash the system...
kernel: vfio/pci: Disable auto-enable of exclusive INTx IRQ
An incorrect handling flaw was found in the Linux kernel framework for secure userspace device drivers functionality that may interrupt some of the devices. This issue could allow a local user to crash the system...
kernel: ftruncate: pass a signed offset
An unexpected file truncate flaw was found when opening files with specific parameters in the Linux kernel's file-system. This vulnerability allows a local user to corrupt specific files when having access to these files...
kernel: Linux kernel: Memory leak in shmem's ramfs-based tmpfs leads to denial of service
A flaw was found in the Linux kernel's shared memory shmem component, specifically within its ramfs-based temporary file system tmpfs implementation. A local user could exploit this vulnerability due to improper memory deallocation. This oversight can lead to a memory leak, potentially causing a...
kernel: dm-raid: really frozen sync_thread during suspend
A hang flaw was found in the Linux kernel’s Raid MD subsystem. This flaw allows a local user to crash the system...
kernel: Linux kernel: Denial of Service via use-after-free in vc_screen
A flaw was found in the Linux kernel. A local user can exploit a use-after-free UAF vulnerability in the vcscreen component. This occurs because a pointer to the vcdata structure is not reloaded after a console unlock operation, leading to the use of freed memory. Successful exploitation of this...
kernel: vfio/pci: Create persistent INTx handler
An interrupt handling flaw was found in the Linux kernel’s PCI core device driver. This flaw allows a local user to potentially crash the system...
OESA-2024-2349 hadoop security update
Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage. Security Fixes: Apache...
mod_jk: information Disclosure / DoS
An Incorrect Default Permissions vulnerability was found in Apache Tomcat Connectors that allows local users to view and modify shared memory containing modjk configuration, which may lead to information disclosure and denial of service...
bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).
A data integrity error was found in the bzip2 User-space package functionality when decompressing. This issue occurs when a user decompresses a particular kind of .bz2 files. A local user could get unexpected results or corrupted data as result of decompressing these files...
kernel: mlxsw: spectrum_acl_erp: Fix object nesting warning
A flaw incorrect memory access in the Linux kernel Mellanox network Ethernet or RDMA device driver was found. A local user could use this flaw to crash the system...