Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerabilities have been resolved: nfc: nxp-nci: Fixed a potential memory leak in nxpncisend The nxpncisend function calls nxpncii2cwrite. The skb is only freed when nxpncii2cwrite fails. However, even if nxpncii2cwrite succeeds, the skb is not freed at that...

EUVD-2021-26352

Malware in sbrugna...

EUVD-2023-50941

Malicious code in bioql PyPI...

EUVD-2022-54506

Malicious code in bioql PyPI...

EUVD-2023-50932

Malicious code in bioql PyPI...

EUVD-2022-37689

Malicious code in bioql PyPI...

EUVD-2022-41554

Malicious code in bioql PyPI...

EUVD-2022-37690

Malicious code in bioql PyPI...

CVE-2023-46774

Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability...

CVE-2022-34741

The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation...

CVE-2022-39008

The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps...

CVE-2022-34740

The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation...

CVE-2020-27043

In nfcenabled of nfcmain.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2022-49923

In the Linux kernel, the following vulnerability has been resolved: nfc: nxp-nci: Fix potential memory leak in nxpncisend nxpncisend will call nxpncii2cwrite, and only free skb when nxpncii2cwrite failed. However, even if the nxpncii2cwrite run succeeds, the skb will not be freed in nxpncii2cwrit...

CVE-2022-49924

CVE-2022-49924 : In the Linux kernel NFC fdp path, fdp_nci_send() calls fdp_nci_i2c_write() which may not free the skb, causing a memory leak when the I2C write completes. The public impact is a potential memory leak affecting kernel availability (CVSS base 5.5, HIGH for availability) with no imp...

CVE-2024-46676

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after...

CVE-2023-52907

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Wait for outurb's completion in pn533usbsendframe Fix a use-after-free that occurs in hcd when inurb sent from pn533usbsendframe is completed earlier than outurb. Its callback frees the skb data in...

CVE-2023-52907 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Wait for outurb's completion in pn533usbsendframe Fix a use-after-free that occurs in hcd when inurb sent from pn533usbsendframe is completed earlier than outurb. Its callback frees the skb data in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a potential null pointer dereference vulnerability in the nfc module nfcgenldumpsesdone...

CVE-2023-52369

Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity...