8678 matches found
USN-7148-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Lyu Tao discovered that the NFS implementation in the Linux kernel did not properly handle requests to open a directory on a regular file. A local attacker could use this to expose sensitive information kernel memory. Several security issues were discovered in the Linux kernel. An attacker could...
Multimedia Memory Management Unit Buffer Overflow
The vulnerability of the Multimedia Memory Management Unit M4U in MediaTek’s microprogramming software is related to the occurrence of operations that go beyond the buffer in memory due to a data type mixing error. Exploiting this vulnerability can allow attackers to gain increased privileges...
USN-7140-1 tinyproxy vulnerability
It was discovered that Tinyproxy did not properly manage memory under certain circumstances. An attacker could possibly use this issue to leak left-over heap data if custom error page templates containing special non-standard variables are used...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Tinyproxy vulnerability (USN-7140-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7140-1 advisory. It was discovered that Tinyproxy did not properly manage memory under certain circumstances. An attacker could possibly use th...
CLSA-2024-1733483766 Fix of 9 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drmdevice - drm: Set finalkfree in drmdevalloc - drm/plane: add drmmuniversalplanealloc - drm: Handle dev-unique with drmm - drm: Use drmm for drmdevinit cleanup - drm:...
VulnCheck KEV: CVE-2023-3269
A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas VMAs is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, a...
DEBIAN-CVE-2024-53133
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handle dml allocation failure to avoid crash Why In the case where a dml allocation fails for any reason, the current state's dml contexts would no longer be valid. Then subsequent calls dcstatecopyinternal would...
CVE-2024-53133 drm/amd/display: Handle dml allocation failure to avoid crash
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handle dml allocation failure to avoid crash Why In the case where a dml allocation fails for any reason, the current state's dml contexts would no longer be valid. Then subsequent calls dcstatecopyinternal would...
kernel: mm/shmem: disable PMD-sized page cache if needed
A denial of service vulnerability was found in the Linux Kernel. In architectures such as ARM64 where the base page size is 64KB, a 512MB page cache could lead to a software crash...
mm Linux Kernel DoS
The vulnerability of the mm component in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
powerpc/pseries/iommu Linux DoS
The vulnerability of the powerpc/pseries/iommu components in the Linux operating system is related to the dereferencing of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel mm/hugetlb DoS
The vulnerability of the Linux kernel’s mm/hugetlb component is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-53096
In the Linux kernel, the following vulnerability has been resolved: mm: resolve faulty mmapregion error path behaviour The mmapregion function is somewhat terrifying, with spaghetti-like control flow and numerous means by which issues can arise and incomplete state, memory leaks and other...
SUSE CVE-2024-53109
In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vmaiterprealloc When deleting a vma entry from a maple tree, it has to pass NULL to vmaiterprealloc in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu...
aio kernel Privilege Escalation
The vulnerability of the aio kernel component in the Linux operating system is related to memory management errors after deallocation. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...
mma8452 Component Privilege Escalation
The vulnerability of the mma8452 component in the Linux operating system is related to memory management errors after deallocation. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...
Linux kernel DoS
The vulnerability of MM and THP components in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...
DEBIAN-CVE-2024-53105
In the Linux kernel, the following vulnerability has been resolved: mm: pagealloc: move mlocked flag clearance into freepagesprepare Syzbot reported a bad page state problem caused by a page being freed using freepage still having a mlocked flag at freepagesprepare stage: BUG: Bad page state in...
UBUNTU-CVE-2024-53113
In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in allocpagesbulknoprof We triggered a NULL pointer dereference for ac.preferredzoneref-zone in allocpagesbulknoprof when the task is migrated between cpusets. When cpuset is enabled, in...
CVE-2024-53111 mm/mremap: fix address wraparound in move_page_tables()
In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix address wraparound in movepagetables On 32-bit platforms, it is possible for the expression len + oldaddr include include include define ADDR1 void0x60000000 define ADDR2 void0x10000000 define SIZE 0x50000000uL int...