CVE-2023-39180

A flaw was found within the handling of SMB2READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to create a denial-of-service condition on affected installations of Linux. Authentication is not required ...

The vulnerability of the fsl-qdma component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the fsl-qdma component in the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: octeontx2-af: fix the double free in rvu_npc_freemem()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix the double free in rvunpcfreemem Clang static checkerscan-build warning： drivers/net/ethernet/marvell/octeontx2/af/rvunpc.c:line 2184, column 2 Attempt to free released memory. npcmcamrsrcsdeinit has released...

The vulnerability of the clk component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the clk component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `ff_v4l2_m2m_create_context` function in the `v4l2_m2m.c` component of the FFmpeg multimedia library occurs due to improper memory release before deleting the last reference. This allows a malicious actor to trigger a service failure.

The vulnerability of the ffv4l2m2mcreatecontext function in the v4l2m2m.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the `filter_frame` function in the `vf_tile.c` component of the FFmpeg multimedia library occurs due to improper memory release before deleting the last reference. This allows a malicious actor to trigger a service failure.

The vulnerability of the filterframe function in the vftile.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the `con_insert_unipair` function in the Linux kernel’s `drivers/tty/vt/consolemap.c` file allows a malicious actor to trigger a service failure by improperly releasing memory before deleting the last reference.

The vulnerability of the coninsertunipair function in the Linux kernel’s drivers/tty/vt/consolemap.c file is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bus_register() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the busregister function in the drivers/base/bus.c module of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the scmi_optee_chan_free() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the scmiopteechanfree function in the drivers/firmware/armscmi/optee.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers, related to memory release errors, allows an attacker to gain access to the kernel’s stack memory and dynamic memory.

The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers is related to memory release errors. Exploiting this vulnerability can allow an attacker to gain access to kernel memory from the stack and dynamic memory...

The vulnerability of the folio_migrate_mapping() function in the Linux kernel’s memory management subsystem allows a attacker to cause a service failure.

The vulnerability of the foliomigratemapping function in the mm/migrate.c module of the Linux kernel’s memory management subsystem is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the aac_init_adapter() function in Adaptec AAC RAID Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the aacinitadapter function in the drivers/scsi/aacraid/comminit.c file of the Adaptec AACRAID driver for Linux operating systems is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

Vulnerability of the cond_listDestroy() function (security/selinux/ss/conditional.c) in the Linux operating system, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability of the condlistDestroy function security/selinux/ss/conditional.c in the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the kfence component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the kfence component in the Linux operating system’s kernel is related to memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the ltq_etop_free_channel() function in the Linux kernel Ethernet driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ltqetopfreechannel function in the drivers/net/ethernet/lantiqetop.c file of the Linux kernel’s Ethernet driver is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the optee component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the optee component in the Linux operating system’s kernel is related to memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the IB/qib component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the IB/qib component in the Linux operating system’s kernel is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2024-47730

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - inject error before stopping queue The master ooo cannot be completely closed when the accelerator core reports memory error. Therefore, the driver needs to inject the qm error to close the master ooo...

AZL-50796 CVE-2024-47730 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - inject error before stopping queue The master ooo cannot be completely closed when the accelerator core reports memory error. Therefore, the driver needs to inject the qm error to close the master ooo...