The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage in Xen hypervisors stems from memory release errors that can occur due to the creation of an arbitrary number of nodes through transactions. Exploiting this vulnerability can allow a attacker to cause service failures...

The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage in Xen hypervisors is related to memory release errors. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage in Xen hypervisors stems from memory release errors that can occur due to the creation of an arbitrary number of nodes. Exploiting this vulnerability could allow a attacker to cause a service failure...

SUSE CVE-2024-27039

In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...

UBUNTU-CVE-2022-48675

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead lock as part of ODP flow by using mmputasync. From the below call trace 1 can see that calling mmput once we have the umemodp-umemmutex locked as required by...

DEBIAN-CVE-2024-27039

In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...

UBUNTU-CVE-2024-27039

In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...

CVE-2024-27039 clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()

In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory release that appears to be incorrect...

kernel: Bluetooth: hci_conn: Fix memory leaks

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix memory leaks When hcicmdsyncqueue failed in hcileterminatebig or hcilebigterminate, the memory pointed by variable d is not freed, which will cause memory leak. Add release process to error path...

kernel: Linux kernel CXL driver: Use-after-free vulnerability leading to system instability or privilege escalation

A flaw was found in the Linux kernel's CXL driver. This vulnerability, a use-after-free, allows a local user to cause system instability or a denial of service. The issue arises when the cxlparsecfmws function attempts to use memory that has already been released. This could potentially lead to...

kernel: net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, fix memory leak in mlx5drcmdcreatereformatctx when mlx5cmdexec failed in mlx5drcmdcreatereformatctx, the memory pointed by 'in' is not released, which will cause memory leak. Move memory release after mlx5cmdexec...

The vulnerability in the Firefox web browser relates to improper memory release before deleting the last link, allowing a malicious actor to gain access to confidential data.

The vulnerability in the Firefox web browser relates to the improper release of memory before deleting the last link. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data...

The vulnerability of the IKE daemon (iked) in Juniper Networks’ Junos routers of the MX and SRX series allows a attacker to cause service interruptions.

The vulnerability of the IKE daemon iked in Juniper Networks’ Junos routers of the MX and SRX series involves improper memory release before deleting the last pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the ovs_pcap_open() function in the Open vSwitch software-level switch allows a attacker to cause a service failure.

The vulnerability of the ovspcapopen function in the Open vSwitch multi-level switch device is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the USB HID analyzer used by Wireshark, which is used to analyze computer network traffic, allows a hacker to perform a service denial.

The vulnerability of the USB HID analyzer used by Wireshark for analyzing computer network traffic is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

SUSE CVE-2024-26800

In the Linux kernel, the following vulnerability has been resolved: tls: fix use-after-free on failed backlog decryption When the decrypt request goes to the backlog and cryptoaeaddecrypt returns -EBUSY, tlsdodecryption will wait until all async decryptions have completed. If one of them fails,...

The vulnerability of the virPCIVirtualFunctionList function in the virtualization management library Libvirt allows a attacker to trigger a service failure.

The vulnerability of the virPCIVirtualFunctionList function in the virtualization management library Libvirt is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2024-3279 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to a memory usage problem after memory release when handling requests. This can allow a remote attacker to execute arbitrary code, affecting the system...

PT-2024-3281 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to a memory usage problem after memory release when handling requests. This can allow a remote attacker to execute arbitrary code, affecting the system...