kernel: nvme-rdma: destroy cm id before destroy qp to avoid use after free

A vulnerability was found in the Linux kernel's nvme-rdma driver where the driver failed to destroy a component cmid before another component qp was destroyed. This issue occurs when the kernel incorrectly manages memory during RDMA, leading to a potential use-after-free...

CVE-2024-8298

Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-8298

Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-8298

Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-8298

CVE-2024-8298 is described across connected documents as a memory request vulnerability in the memory management module affecting Huawei EMUI and HarmonyOS. Reported impact is potential confidentially impact on services when exploited locally, with no public exploit details provided in the source...

CVE-2024-8298

Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

kernel: mm: avoid overflows in dirty throttling logic

A vulnerability was found in the Linux kernel's memory management subsystem where a lack of proper size checks on dirty limits can lead to situations where large dirty limits end up being larger than 32-bits, resulting in potential overflows and divisions by 0. This can cause memory corruption,...

kernel: mm/huge_memory: don't unpoison huge_zero_folio

A vulnerability was found in the Linux kernel's memory management component in the unpoisonmemory function, where it involves improper handling of hugezerofolio when memory failures occur, which can lead to a kernel panic due to an erroneous reference count...

kernel: mm: avoid overflows in dirty throttling logic

A vulnerability was found in the Linux kernel's memory management subsystem where a lack of proper size checks on dirty limits can lead to situations where large dirty limits end up being larger than 32-bits, resulting in potential overflows and divisions by 0. This can cause memory corruption,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an alignment assumption error vulnerability in the pticlonepgtable function in the x86/mm component...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a potential fault handling error and system crash vulnerability in the iommu component...

The vulnerability of the Linux operating system’s kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel component, “gadget”, is related to an error in memory management after freeing memory due to the failure to configure “udc→dev.driver”. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again

REJECTED CVE...

PT-2024-38925 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A vulnerability exists in the memory management module that deals with memory requests. If exploited, it can impact service confidentiality...

The vulnerability of the mmu component in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the mmu component in the Linux operating system’s kernel is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

Double Free

libpcap is vulnerable to a Double Free. The vulnerability is due to the sockinitaddress function not clearly indicating whether freeaddrinfo still needs to be called by the caller function, leading to the possibility of both the function and its caller freeing the same memory block...

DEBIAN-CVE-2023-7256

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

CVE-2023-7256 Double-free in libpcap before 1.10.5 with remote packet capture support.

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

UBUNTU-CVE-2024-43888

In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found b...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to properly free controller device memory...