Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Driver core: The variable struct acpipldinfo pld should be freed before returning from a function that causes allocation failure. To prevent a memory leak, use the ACPIFREE function to free the memory...

EUVD-2023-59872

Malicious code in bioql PyPI...

CVE-2023-53336 media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings

In the Linux kernel, the following vulnerability has been resolved: media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings When ipubridgeparserotation and ipubridgeparseorientation run sensor-adev is not set yet. So if either of the devwarn calls about unknown values are hit this...

CVE-2023-53211 driver core: location: Free struct acpi_pld_info *pld before return false

In the Linux kernel, the following vulnerability has been resolved: driver core: location: Free struct acpipldinfo pld before return false struct acpipldinfo pld should be freed before the return of allocation failure, to prevent memory leak, add the ACPIFREE to fix it...

CVE-2023-53211 driver core: location: Free struct acpi_pld_info *pld before return false

In the Linux kernel, the following vulnerability has been resolved: driver core: location: Free struct acpipldinfo pld before return false struct acpipldinfo pld should be freed before the return of allocation failure, to prevent memory leak, add the ACPIFREE to fix it...

kernel: Linux kernel: Memory leak in driver core location can lead to denial of service

A flaw was found in the Linux kernel. This memory leak vulnerability exists in the driver core location component, where the acpipldinfo structure is not properly freed upon allocation failure. A local attacker could exploit this flaw to cause a denial of service DoS due to resource exhaustion...

Fuji Electric Alpha5 PLD File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Alpha5. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...