UBUNTU-CVE-2024-27403

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flowoffloadadd fails, error path...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which is caused by a reference count underflow in the netfilter module...

PT-2024-28068

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak issue exists in the ax25 dev device down function, which can cause a memory leak when the ax25 device is shutting down. The issue arises because the ax25 dev devic...

CVE-2022-48700

In the Linux kernel, the following vulnerability has been resolved: vfio/type1: Unpin zero pages There's currently a reference count leak on the zero page. We increment the reference via pinuserpagesremote, but the page is later handled as an invalid/reserved page, therefore it's not accounted...

CVE-2022-48700

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

AZL-42265 CVE-2022-48670 affecting package kernel for versions less than 5.15.158.2-1

In the Linux kernel, the following vulnerability has been resolved: peci: cpu: Fix use-after-free in adevrelease When auxiliarydeviceadd returns an error, auxiliarydeviceuninit is called, which causes refcount for device to be decremented and .release callback will be triggered. Because adevrelea...

CVE-2022-48700

...

CVE-2022-48700

CVE-2022-48700 affects the Linux kernel VFIO (type1) path, specifically an issue titled “Unpin zero pages.” The connected Nessus entry explicitly references “vfio/type1: Unpin zero pages (CVE-2022-48700),” indicating the vulnerability resides in the VFIO code path and is tied to unpinning of zero...

CVE-2022-48700

...

CVE-2022-48700

Removed by vendor...

DEBIAN-CVE-2024-27054

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix double module refcount decrement Once the discipline is associated with the device, deleting the device takes care of decrementing the module's refcount. Doing it manually on this error path causes refcount to...

UBUNTU-CVE-2024-27027

In the Linux kernel, the following vulnerability has been resolved: dpll: fix dpllxarefdel for multiple registrations Currently, if there are multiple registrations of the same pin on the same dpll device, following warnings are observed: WARNING: CPU: 5 PID: 2212 at drivers/dpll/dpllcore.c:143...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates in the dpllxarefdplldel function and the dpllxarefpindel function, which removes registrations from the list onl...

kernel: Kernel: Denial of Service due to reference count leak

A flaw was found in the Linux kernel. A local attacker with low privileges and physical access could exploit a reference count leak in the xgmiitorgmiiprobe function. This vulnerability could lead to resource exhaustion, resulting in a Denial of Service DoS, which means the system may become...

kernel: iommufd: IOMMUFD_DESTROY should not increase the refcount

A race condition was identified in the iommufd subsystem of the Linux kernel where the IOMMUFDDESTROY command incorrectly increments an object’s reference count without holding the expected exclusive synchronization destroyrwsem. This violates the assumption that temporary reference count...

kernel: netfilter: nf_tables: fix underflow in chain reference counter

A flaw was found in the Linux kernel's netfilter nftables component. During set element addition, an error path incorrectly decrements the chain reference counter twice. This reference count underflow could potentially lead to a use-after-free condition when the chain is subsequently freed while...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a reference count leak error in the ofxudmadevget function...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a possible reference count leak in the tcnewtfilter function...

Mozilla: Potential use-after-free due to AlignedBuffer self-move

The Mozilla Foundation Security Advisory describes this flaw as: If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free...

Mozilla: Potential use-after-free due to AlignedBuffer self-move

The Mozilla Foundation Security Advisory describes this flaw as: If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free...