The vulnerability of the register_winch_irq() function in the User-Mode Linux (UML) subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the registerwinchirq function in the arch/um/drivers/line.c file of the User-Mode Linux subsystem driver for the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a...

The vulnerability of the btrfs_load_zone_info() function in the Btrfs file system of Linux kernels allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the btrfsloadzoneinfo function in the fs/btrfs/zoned.c file of the Btrfs file system in Linux kernel is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the brcmf_notify_escan_complete() function in the Broadcom FullMAC driver for Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the brcmfmac/cfg80211.c file within the Broadcom FullMAC driver’s drivers/net/wireless/broadcom/brcm80211/ directory in the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability...

The vulnerability of the sess_free_buffer() function in the fs/cifs/sess.c module of the SMB file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sessfreebuffer function in the fs/cifs/sess.c module of the SMB file system in Linux operating systems is related to the reallocation of previously released memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the cdns3_gadget_giveback() function in the drivers/usb/cdns3/cdns3-gadget.c file of the USB Cadence driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cdns3gadgetgiveback function in the drivers/usb/cdns3/cdns3-gadget.c file of the USB Cadence driver for the Linux operating system is related to the reallocation of allocated memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the qla2x00_mem_alloc() function in the drivers/scsi/qla2xxx/qla_os.c module of the QLogic QLA2XXX kernel driver for the Linux operating system allows a hacker to cause service failure or exert other adverse effects.

The vulnerability of the qla2x00memalloc function in the drivers/scsi/qla2xxx/qlaos.c file of the QLogic QLA2XXX kernel in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure or...

The vulnerability of the ext4Move_extents() function in the fs/ext4/move_extent.c file of the Linux kernel’s file system ext4 allows a attacker to cause a service failure.

The vulnerability of the ext4Moveextents function in the fs/ext4/moveextent.c file of the Linux kernel’s file system relates to the reallocation of allocated memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the QEMU hardware emulation software, related to a memory rerelease error, allows a hacker to execute arbitrary code.

The vulnerability of the QEMU hardware emulation software is related to a memory reallocation error. Exploiting this vulnerability allows an attacker to execute arbitrary code by performing repeated DMA transfers...

Use-After-Free

gtkwave is vulnerable to Use-After-Free. The vulnerability is due to improper handling of memory reallocation in the VCD getvartoken function when triggered via the vcd2vzt conversion utility. It allows a specially crafted .vcd file can lead to arbitrary code execution...

Use-After-Free

gtkwave is vulnerable to Use-After-Free. The vulnerability is due to improper handling of memory reallocation in the VCD getvartoken function when triggered via the GUI's interactive VCD parsing code. It allows a specially crafted .vcd file can lead to arbitrary code execution...

Out-of-Bounds-Read

gtkwave is vulnerable to Out-of-Bounds-Read. The vulnerability is due to improper handling of memory reallocation in the VCD var definition section functionality via the vcd2lxt conversion utility. It allows a specially crafted .vcd file can lead to arbitrary code execution...

The vulnerability of the v4l2_async_unregister_subdev() function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the v4l2asyncunregistersubdev function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver is related to the reallocation of memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility o...

The vulnerability of the `nft_setelem_catchall_deactivate()` function in the `net/netfilter/nf_tables_api.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, thereby enhancing their privileges.

The vulnerability of the nftsetelemcatchalldeactivate function in the net/netfilter/nftablesapi.c module of the Linux operating system is related to the reallocation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the bt_sock_recvmsg() function in the net/bluetooth/af_bluetooth.c module of the Linux kernel’s Bluetooth driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the btsockrecvmsg function in the net/bluetooth/afbluetooth.c module of the Linux kernel’s Bluetooth driver is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the gsm_cleanup_mux() function in the N_GSM driver for Linux operating systems allows attackers to increase their privileges.

The vulnerability of the gsmcleanupmux function in the NGSM driver for Linux operating systems is related to the reallocation of previously released memory due to competitive access to resources a “race condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

kernel: bpf, verifier: Fix memory leak in array reallocation for stack state

A flaw was found in the eBPF subsystem in the Linux kernel. An incorrect logic in a helper function for memory reallocation can cause memory leaks when a memory allocation error occurs, potentially leading to system instability and a denial of service...

SUSE CVE-2013-1723

The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key messages after destruction by a dispatched event listener, which allows remote attackers to cause a denial of service application crash by leveraging incorrect event usage after...

yajl: heap-based buffer overflow when handling large inputs due to an integer overflow

A flaw was found in the YAJL library in the way it reallocates a memory buffer to store more data. A very large input causes the value used to calculate the buffer size to overflow, resulting in a heap-based buffer overflow...

kernel: regmap: Fix possible double-free in regcache_rbtree_exit()

In the Linux kernel, the following vulnerability has been resolved: regmap: Fix possible double-free in regcacherbtreeexit In regcacherbtreeinserttoblock, when 'present' realloc failed, the 'blk' which is supposed to assign to 'rbnode-block' will be freed, so 'rbnode-block' points a freed memory,...

The vulnerability of the CODESYS Runtime Toolkit execution environment arises from overflowing buffers in dynamic memory, allowing attackers to trigger a service failure or reallocate memory areas.

The vulnerability of the CODESYS Runtime Toolkit execution environment is due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure or reallocate memory by sending a specially crafted request...