Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the reuse of memory after cgroups and dmem are released, potentially leading to memory corruption...

The vulnerability of the nouveau_gem_prime_import_sg_table() function in the drivers/gpu/drm/nouveau/nouveau_prime.c driver of the Direct Rendering Infrastructure (DRI) subsystem of the NVIDIA graphics card driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nouveaugemprimeimportsgtable function in the drivers/gpu/drm/nouveau/nouveauprime.c file of the Nouveau driver for Direct Rendering Infrastructure DRI in NVIDIA’s Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could...

The vulnerabilities of the functions virtio_queue_rqs() and virtblk_poll() in the drivers/block/virtio_blk.c module of the Linux kernel’s block devices driver allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions virtioqueuerqs and virtblkpoll in the drivers/block/virtioblk.c module of the Linux kernel’s block devices driver are related to the reutilization of previously released memory. Exploiting these vulnerabilities could allow an attacker to compromise the...

The vulnerability of the `efivar_ssdt_load()` function in the `drivers/firmware/efi/efi.c` file of the Linux kernel’s driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the efivarssdtload function in the drivers/firmware/efi/efi.c file of the Linux kernel’s firmware driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the raid5_end_write_request() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the raid5endwriterequest function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the blocking_domain_set_dev_pasid() function in the drivers/iommu/intel/iommu.c file of the Linux operating system’s IOMMU driver module allows a attacker to cause a service failure.

The vulnerability of the blockingdomainsetdevpasid function in the drivers/iommu/intel/iommu.c file of the Linux operating system’s IOMMU driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext4_io_end_defer_completion() function in the fs/ext4/page-io.c file of the Ext4 file system of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4ioenddefercompletion function in the fs/ext4/page-io.c file of the Ext4 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext4_iget_extra inode() function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system allows a attacker to gain access to protected information or cause service failures.

The vulnerability of the ext4igetextra inode function in the fs/ext4/inode.c file of the Ext4 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to access protected information or cause servic...

The vulnerabilities of the `scpi_init_versions()` and `scpi_probe()` functions in the Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the scpiinitversions and scpiprobe functions in the Linux kernel are related to the reutilization of previously freed memory. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the __fbnic_open() function in the drivers/net/ethernet/meta/fbnic/fbnic_netdev.c file of the Linux kernel’s network adapter driver allows a hacker to cause a service failure.

The vulnerability of the fbnicopen function in the drivers/net/ethernet/meta/fbnic/fbnicnetdev.c file of the Linux kernel’s network adapter driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the usb_udc_uevent() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbudcuevent function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the prepare_to_relocate() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the preparetorelocate function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the dmabufexp_from_pages() function in the drivers/xen/gntdev-dmabuf.c driver code of the Linux kernel’s page buffer device driver allows a attacker to cause a service failure.

The vulnerability of the dmabufexpfrompages function in the drivers/xen/gntdev-dmabuf.c driver for Linux kernel-based device buffer devices is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the `usbnet_stop()` and `usbnet_disconnect()` functions in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the usbnetstop and usbnetdisconnect functions in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

lrzip 资源管理错误漏洞

lrzip is a compression utility personally developed by Con Kolivas. Versions of lrzip prior to 0.651 contained a resource management vulnerability, which stemmed from the use of the lzmadecompressbuf function, where memory was reclaimed and then reused...

The vulnerability of the fc_exch_abts_resp() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fcexchabtsresp function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the ext4_truncate() function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4truncate function in the fs/ext4/inode.c file of the Ext4 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ipc_msg_send_request() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipcmsgsendrequest function in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the `__ieee80211_scan_completed()` function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee80211scancompleted function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the diskDestroyZoneWPLugsHashTable() function in the block/blk-zoned.c module, which supports the block-level kernel in the Linux operating system. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the diskDestroyZoneWPLugsHashTable function in the block/blk-zoned.c module, which supports the block-level kernel in the Linux operating system, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a servi...