285 matches found
PT-2023-34351 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential security issue has been identified in the Linux Kernel, related to a crash in mempool free. The actual impact and attack plausibility have not yet been proven. Recommendations:...
MAL-2022-691 Malicious code in @uniswapv2/mempool (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757bc76cb718365caf2a86ab75367434d84cf67593c31497d74ed11eb494d86e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GSD-2022-1005391 cifs: fix small mempool leak in SMB2_negotiate()
cifs: fix small mempool leak in SMB2negotiate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...
GSD-2022-1004960 cifs: fix small mempool leak in SMB2_negotiate()
cifs: fix small mempool leak in SMB2negotiate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...
Newton's iteration convergence might not converge
Lines of code Vulnerability details Impact In getAmountOut for stable pair, Newton's method is used, however there is no check for the solution convergence. The numerical stability for Newton's method only applies to initial value close enough to the real solution. If the iteration fail to...
kernel: dm: fix mempool NULL pointer race when completing IO
A flaw was found in the Linux kernel's Device Mapper DM subsystem. This flaw allows a local user to cause a denial of service DoS by triggering a system crash. The issue occurs due to a race condition when an input/output I/O request completes concurrently with a table swap operation, resulting i...
kernel: dm: fix mempool NULL pointer race when completing IO
A flaw was found in the Linux kernel's Device Mapper DM subsystem. This flaw allows a local user to cause a denial of service DoS by triggering a system crash. The issue occurs due to a race condition when an input/output I/O request completes concurrently with a table swap operation, resulting i...
Griefing on claim()
Lines of code Vulnerability details Issue: griefing can happen if coolDownPeriod 0 due to the fact that you can stake for someone else. Whenever a stake happens, the expiry variable increases with coolDownPeriod. This can be done either by watching the mempool and frontrun a stake when someone...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local...
Users will lose all of their money during pool migration
Lines of code Vulnerability details Impact Users will lose all of their money when they migrate by calling PoolMigrationZap.migrate Proof of Concept File: protocol/contracts/zaps/PoolMigrationZap.sol 1 52 function migrateaddress oldPoolAddress public override 53 ILiquidityPool oldPool =...
Users can grief reward distribution
Lines of code Vulnerability details Impact Users can grief reward distributions by spending dust Proof of Concept If a reward is targeted for an epoch in the past, a user can front-run the txn in the mempool and call addRewardToEpoch with a dust amount at an epoch after the one in question. This...
kernel: dm: fix mempool NULL pointer race when completing IO
A flaw was found in the Linux kernel's Device Mapper DM subsystem. This flaw allows a local user to cause a denial of service DoS by triggering a system crash. The issue occurs due to a race condition when an input/output I/O request completes concurrently with a table swap operation, resulting i...
kernel: dm: fix mempool NULL pointer race when completing IO
A flaw was found in the Linux kernel's Device Mapper DM subsystem. This flaw allows a local user to cause a denial of service DoS by triggering a system crash. The issue occurs due to a race condition when an input/output I/O request completes concurrently with a table swap operation, resulting i...
PT-2022-29641
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue affects the NFS component, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2022-29298
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to NFS, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2022-30256
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to NFS, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-29967
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to NFS, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
