CVE-2021-47505 aio: fix use-after-free due to missing POLLFREE handling

In the Linux kernel, the following vulnerability has been resolved: aio: fix use-after-free due to missing POLLFREE handling signalfdpoll and binderpoll are special in that they use a waitqueue whose lifetime is the current task, rather than the struct file as is normally the case. This is okay f...

CVE-2021-47505

CVE-2021-47505 in the Linux kernel: use-after-free when polling signalfd or binder fds with aio poll due to POLLFREE not being handled. The PATCH by Ramji Jiyani fixes aio_poll_wake() handling POLLFREE and avoids deadlock by ensuring waitqueue freeing is RCU-delayed, aligning with eventpoll behav...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue in the aio module due to a lack of POLLFREE handling...

PT-2024-8916

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.18 Description: The vulnerability is related to a use-after-free error in the Linux kernel's aio component. This error occurs when the aio poll wake function is called and the POLLFREE notification is not...

SUSE CVE-2021-47302

In the Linux kernel, the following vulnerability has been resolved: igc: Fix use-after-free error during reset Cleans the next descriptor to watch nexttowatch when cleaning the TX ring. Failure to do so can cause invalid memory accesses. If igcpoll runs while the controller is being reset this ca...

UBUNTU-CVE-2021-47302

In the Linux kernel, the following vulnerability has been resolved: igc: Fix use-after-free error during reset Cleans the next descriptor to watch nexttowatch when cleaning the TX ring. Failure to do so can cause invalid memory accesses. If igcpoll runs while the controller is being reset this ca...

CVE-2024-35820

Summary: Multiple sources indicate CVE-2024-35820 has been withdrawn by its CVE Numbering Authority. In the connected Red Hat advisory, the issue is described in the Linux kernel io_uring subsystem: a vulnerability in the io_queue_proc function arises from improper modification of req->flags, ...

CVE-2024-35820

Removed by vendor...

PT-2024-28077

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the gem poll controller function, which disables interrupts and may cause the system to sleep. However, sleeping is not allowed in netpoll, as it has interrupts...

Democracy Poll <= 6.0.3 - Missing Authorization

Description The Democracy Poll plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 6.0.3. This makes it possible for unauthenticated attackers to perform an unauthorized action...

CVE-2024-33920

Missing Authorization vulnerability in Kama Democracy Poll.This issue affects Democracy Poll: from n/a through 6.0.3...

CVE-2024-33920 WordPress Democracy Poll plugin <= 6.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kama Democracy Poll.This issue affects Democracy Poll: from n/a through 6.0.3...

CVE-2024-33920 WordPress Democracy Poll plugin <= 6.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kama Democracy Poll.This issue affects Democracy Poll: from n/a through 6.0.3...

CVE-2024-33920

CVE-2024-33920 describes a missing-authorization vulnerability in the Democracy Poll WordPress plugin (Kama Democracy Poll). The Red Hat and Wordfence entries in Connected documents indicate this affects Democracy Poll versions up to 6.0.3 and label the issue as missing authorization. The CVSS da...

WordPress plugin Democracy Poll 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-25553

Name of the Vulnerable Software and Affected Versions Kama Democracy Poll versions n/a through 6.0.3 Description The issue is related to a Missing Authorization vulnerability in Kama Democracy Poll. Recommendations For versions n/a through 6.0.3, update to a version later than 6.0.3 to resolve th...

CVE-2024-33920: Missing Authorization

Missing Authorization vulnerability in Kama Democracy Poll.This issue affects Democracy Poll: from n/a through 6.0.3...

CVE-2024-3601

The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ayspollcreateauthor function in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to extract email...

CVE-2024-3601

The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ayspollcreateauthor function in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to extract email...

CVE-2024-3601 Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumeration

The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ayspollcreateauthor function in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to extract email...