CVE-2021-47482 net: batman-adv: fix error handling

In the Linux kernel, the following vulnerability has been resolved: net: batman-adv: fix error handling Syzbot reported ODEBUG warning in batadvncmeshfree. The problem was in wrong error handling in batadvmeshinit. Before this patch batadvmeshinit was calling batadvmeshfree in case of any...

DEBIAN-CVE-2024-26894

In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Fix memory leak in acpiprocessorpowerexit After unregistering the CPU idle device, the memory associated with it is not freed, leading to a memory leak: unreferenced object 0xffff896282f6c000 size 1024: comm...

The vulnerability of the shadow-utils package, related to incorrect authentication, allows a hacker to gain unauthorized access to user passwords.

The vulnerability of the shadow-utils package is related to the double password request and the lack of buffer memory cleanup. Exploiting this vulnerability can allow an attacker to gain unauthorized access to user passwords...

PT-2024-3469 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a double free error in the Linux kernel's USB driver, specifically in the ljca module. When auxiliary device add returns an error and calls auxiliary device...

The vulnerability of the drm_connector_cleanup() function of the Direct Rendering Manager (DRM) subsystem in Linux operating systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the drmconnectorcleanup function in the Direct Rendering Manager DRM subsystem of Linux operating systems is related to the use of memory after it is freed as a result of an incorrect cleanup procedure. Exploiting this vulnerability could allow an attacker to compromise the...

IBM Sterling Secure Proxy Security Vulnerability

IBM Sterling Secure Proxy is an International Business Machines IBM application agent used to ensure the secure transfer of files in an organization's unprotected zone DMZ. A security vulnerability exists in IBM Sterling Secure Proxy versions 6.0.3 and 6.1.0, which stems from an inadequate memory...

CVE-2023-39440

In SAP BusinessObjects Business Intelligence - version 420, If a user logs in to a particular program, under certain specific conditions memory might not be cleared up properly, due to which attacker might be able to get access to user credentials. For a successful attack, the attacker needs to...

USN-6200-1 imagemagick vulnerabilities

It was discovered that ImageMagick incorrectly handled the "-authenticate" option for password-protected PDF files. An attacker could possibly use this issue to inject additional shell commands and perform arbitrary code execution. This issue only affected Ubuntu 20.04 LTS. CVE-2020-29599 It was...

kernel: PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Deallocate EPC memory on dwpcieepinit errors If dwpcieepinit fails to perform any action after the EPC memory is initialized and the MSI memory region is allocated, the latter parts won't be undone thus causing a memory...

Cisco Secure Network Analytics 代码问题漏洞

Cisco Secure Network Analytics is one of the most comprehensive visibility and Network Traffic Analysis Nta/Network Detection and Response Ndr solutions from Cisco, Inc. It is used to provide continuous, real-time monitoring and a universal view of all network traffic. A security vulnerability...

PT-2025-53045

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the DRM encoder handling during unbinding, specifically within the drm/rockchip and dw hdmi components. This issue results in a use-after-free crash...

SUSE CVE-2014-4021

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors...

Ubuntu: Security Advisory (USN-5375-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-7098 · Brave · Brave Browser

Name of the Vulnerable Software and Affected Versions: Brave Browser affected versions not specified Description: The issue is related to incorrect memory cleanup or deallocation in the Brave Browser, which can be exploited by a remote attacker using a specially crafted html file to cause a denia...

USN-5736-1: ImageMagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain values when processing PDF files. If a user or automated system using ImageMagick were tricked into opening a specially crafted PDF file, an attacker could exploit this to cause a denial of service. This issue only affected Ubuntu 14....

PT-2022-35056 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns erroneous memory clean-up loops in the vt6655 staging driver. It was introduced in version v4.18 and fixed in version v6.0.3. The actual impact and attack plausibility have...

PT-2022-35764 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue concerns some erroneous memory clean-up loops in the vt6655 staging driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2021-26393

Insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of...

CVE-2021-26393

Insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of...

Design/Logic Flaw

Insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of...