ROS-20260113-7328

A vulnerability in the checkfuncarg function of the kernel/bpf/verifier.c module of the Linux kernel is related to improper control of resource identifiers "resource injection". Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of...

ROS-20260113-7321

A vulnerability in the f2fssetattr function of the fs/f2fs/file.c module of the Linux kernel's F2FS file system support is related to improper control of resource identifiers "resource injection". Exploitation of the vulnerability may allow a remote intruder to affect the integrity of protected...

CVE-2023-25005

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability...

The vulnerability of the software for configuring Poly Lens Desktop devices stems from improper control of resource identifiers, allowing attackers to escalate their privileges.

The vulnerability of the software for configuring Poly Lens Desktop devices is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the spi_async() function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver allows a attacker to corrupt data.

The vulnerability of the spiasync function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected...

The vulnerability of the amdgpu_vram_mgr_fini() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c driver module allows a hacker to cause a service failure in AMD GPU-based Linux operating system Direct Rendering Infrastructure (DRI) kernels.

The vulnerability of the amdgpuvrammgrfini function in the drivers/gpu/drm/amd/amdgpu/amdgpuvrammgr.c driver module is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mptcp_update_infinite_map() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel, which allows a attacker to cause a service failure.

The vulnerability of the mptcpupdateinfinitemap function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to cause service...

Vulnerability of the bond_setup_by_slave() function in the drivers/net/bonding/bond_main.c module – a Linux kernel network adapter driver support mechanism that allows a hacker to cause a service failure

Vulnerability of the bondsetupbyslave function in the drivers/net/bonding/bondmain.c module – The Linux kernel’s network adapter support driver is vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause servic...

The vulnerability of the kvm_arch_vcpu_ioctl() function in the arch/powerpc/kvm/powerpc.c module of the virtualization subsystem on the PowerPC platform of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the kvmarchvcpuioctl function in the arch/powerpc/kvm/powerpc.c module of the virtualization subsystem on the PowerPC platform of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow ...

Vulnerability of the function dc_dmub_srv_optimized_init_done() in the driver/gpu/drm/amd/display/dc/dc_dmub_srv.c file – This is a driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems. It allows a hacker to cause a service failure.

Vulnerability of the dcdmubsrvoptimizedinitdone function in the drivers/gpu/drm/amd/display/dc/dcdmubsrv.c file – The drivers for AMD graphics cards that support Direct Rendering Infrastructure DRI in Linux operating systems are vulnerable due to improper control of resource identifiers “resource...

Vulnerability of the function ice_dpll_init_worker() in the module drivers/net/ethernet/intel/ice/ice_dpll.c – a driver for supporting Ethernet adapter cards in Linux kernel-based operating systems, which allows an attacker to cause a service failure.

Vulnerability of the function icedpllinitworker in the module drivers/net/ethernet/intel/ice/icedpll.c – The driver for supporting Ethernet adapter cards in Linux operating systems is vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this vulnerability...

Vulnerability of the xe_oa_release() function in the drivers/gpu/drm/xe/xe_oa.c module – The DRI driver for Linux kernel’s direct rendering infrastructure allows a hacker to trigger a service failure.

Vulnerability of the xeoarelease function in the drivers/gpu/drm/xe/xeoa.c module – The driver for Linux’s Direct Rendering Infrastructure DRI has a vulnerability related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cau...

Vulnerability of the thermal_zone_get_by_id() function in the drivers/thermal/thermal_core.c module – a driver for controlling kernel temperature in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the thermalzonegetbyid function in the drivers/thermal/thermalcore.c module – The Linux kernel temperature control driver is vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a system...

Vulnerability of the dpu_encoder_helper_phys_cleanup() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in Linux kernels, which can be exploited by attackers to cause service failures.

Vulnerability of the dpuencoderhelperphyscleanup function in the drivers/gpu/drm/msm/disp/dpu1/dpuencoder.c module – The Linux kernel’s DRI support driver has a vulnerability related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an...

The vulnerability of the dm_resume() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c file of the DRI support driver for AMD graphics cards in Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the dmresume function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c file of the DRI support driver for AMD graphics cards in Linux operating systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow...

The vulnerability of the batadv_iv_ogm_emit() function in the net/batman-adv/bat_iv_ogm.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the batadvivogmemit function in the net/batman-adv/bativogm.c module of the Linux kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SCALANCE and RUGGEDCOM Devices Improper Control of Resource Identifiers ('Resource Injection') (CVE-2024-42244)

USB: serial: mos7840: fix crash on resume SinceUSB: serial: use generic method if no alternative is provided in usb serial layer, USB serial core calls the generic resume implementation when the driver has not provided one. This can trigger a crash on resume with mos7840 since support for multipl...

Siemens SCALANCE and RUGGEDCOM Devices Improper Control of Resource Identifiers ('Resource Injection') (CVE-2024-41007)

tcp: avoid too many retransmit packets If a TCP socket is using TCPUSERTIMEOUT. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504724;...

The vulnerability of the die_mce() function in the arch/powerpc/kernel/traps.c module, which is part of the PowerPC kernel support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the diemce function in the arch/powerpc/kernel/traps.c module of the PowerPC platform support for the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the nf_conntrack_hash_check_insert() function in the net/netfilter/nf_conntrack_core.c module of the Linux kernel’s netfilter subsystem allows a hacker to induce a service failure.

The vulnerability of the nfconntrackhashcheckinsert function in the net/netfilter/nfconntrackcore.c module of the netfilter component of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to...