kernel: bpf: Fix overrunning reservations in ringbuf

An out-of-bounds memory access flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to crash the system...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle dml allocation failures in the drm/amd/display driver, which could lead to a...

The vulnerability of the Linux operating system’s kernel’s phonetic component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel’s phonetic component is related to the operation of the operation outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-9669

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 131.0.6778.204 Description The issue is related to an out of bounds memory access in the V8 JavaScript engine, which can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

PT-2024-36973

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, related to the wifi component and the nl80211 attribute. The issue was caused by an off-by-one error in the validation of the NL80211 ATTR...

The vulnerability of the vdec component of MediaTek’s microprogramming software chips allows attackers to enhance their privileges.

The vulnerability of the vdec component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the ALSA kernel component in Linux operating systems, which allows a hacker to cause a service failure

The vulnerability of the ALSA kernel component in Linux operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the hns_dsaf_ge_srst_by_port() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function hnsdsafgesrstbyport in the Linux kernel’s drivers/net/ethernet/hisilicon/hns/hnsdsafmisc.c module is related to memory access beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

kernel: Fix of 6 CVEs

hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails CVE-2022-49029 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - ext4: no need to continue when the number of entries is 1 CVE-2024-49967 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - packet: in...

CVE-2024-33036

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access...

CVE-2024-33036 Use of Out-of-range Pointer Offset in Camera Driver

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access...

CVE-2024-33036

CVE-2024-33036: Memory corruption in Qualcomm camera driver parsing sensor packets. The root cause is using a user-space variable during kernel memory allocation/parsing, which can trigger large allocations or invalid memory access. Documented impact is memory corruption with potential out-of-bou...

CVE-2024-53110: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vpvdpa: fix idtable array not null terminated error Allocate one extra virtiodeviceid as null terminator, otherwise vdpamgmtdevgetclasses may iterate multiple times and visit undefined memory...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the idtable array in the vpvdpa component not being terminated with a null terminator, causing the...

Vulnerability of RDMA/IRDMA components of the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of RDMA/IRDMA components in the Linux operating system is related to the assignment of the NULL pointer in the irdmaaddmqh4 function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of RDMA/mlx5 components of the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of the isofs component in Linux operating systems is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-43703: Use After Free

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW...

Low-level invalid GF(2^m) parameters lead to OOB memory access

...

CVE-2024-47181

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RPL implementations is enabled and connected to an RPL...

CVE-2024-47181

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RPL implementations is enabled and connected to an RPL...