Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a security vulnerability. This vulnerability stems from Chromecast’s ability to reuse released resources. A remote attacker can execute arbitrary code within a sandbox by using a specially crafted HTML page...

GPAC MP4Box security vulnerability

The GPAC MP4Box contains a security vulnerability, which stems from the use of the gffilterpidgetpacket function located in filtercore/filterpid.c. This function allows for the reuse of resources after they have been released. Attackers can exploit this vulnerability by providing a specially...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from nouveauuvmmsm incorrectly treating ttmresource as nouveaumem when BO is at TTMPLSYSTEM. This leads to out-of-bounds read accesses and reuse of resources after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.14 contains a security vulnerability. This vulnerability arises from the failure to cancel the PS delivery process promptly when deleting an AP or mesh station. The function stadeliverpsframes only checks sta-dead before delivery. As a result, delayed work threads may...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from a lack of synchronization in the allocbulk function of bpf when processing lists like waitingforgpttrace and freebyrcuttrace concurrently. This leads to race conditions and allows for reuse of resource...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains a security vulnerability. This vulnerability stems from the phylinkbringupPhy function in drivers/net/phy/phylink.c. The function records the PHY state before calling phyeeerxclockstop, which may fail. After failure, pl-phydev is not cleared, causing the...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel from 6.18.19 to 6.18.55, as well as versions from 6.19.9 to 6.20, and 7.0, contain security vulnerabilities. These vulnerabilities stem from schedext incorrectly setting the merge-queue flag to SCXRQINWAKEUP. This causes delayed scheduling requests to remain active ev...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 5.15.17 to 5.16, 5.16.3 to 5.17, and 5.17 itself. These vulnerabilities stem from the iio trigger not canceling reenablework before releasing the trigger. The worker that was last started via an ongoing IRQ can continue to run after...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.9 contains security vulnerabilities. These vulnerabilities arise when the controller path that creates the multipath namespace is removed for the first time, causing the I/O direct access command to trigger a release followed by reuse of resources...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.19 has a security vulnerability. This vulnerability stems from improper locking and serialization in Bluetooth SMP remote OOB data access. The buildpairingcmd function searches for and copies remote OOB data without holding the hdev-lock. This may lead to post-release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.17 contains a security vulnerability. This vulnerability arises from the use of histregistertrigger, which adds triggers to the global namedtriggers list before setting the tracking clock. Additionally, no check is performed on the clock string, allowing the use of...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability stems from a loop in the ppldoflush function that continues iterating after calling ppliounitfinished, resulting in access to io-pendingflushes. This could lead to reuse of resources after they have been released...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the function rvtallocdevice, which releases an IB device after failure to allocate a port array. However, it still returns a pointer that was previously released. Callers interpret this non-NULL value as valid and...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the use of ip6mrcachereport, which clones non-reference-counted dst entries. When underlying routes are deleted and released, dstclone is executed on the released dst entries, leading to slab reclamation and reuse of...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from race conditions between nfs4laundromat and revokedelegation during the delegation revocation process, allowing for reuse of resources after the client has released them...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from lifecycle issues with the CXL MCE notifier, which may lead to null pointer dereferencing and reuse of resources after memory management operations...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the svcrdmalistenhandler function, which handles RDMACMEVENTADDRCHANGE. When attempting to replace the listener allocation, if sccmid is not set to null after the failure, it leads to reusing the freed resource after...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises when the driver detects through driverattach, and the bus match callback accesses the driveroverride field without holding a device lock. This may lead to reusing resources after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.8 contains security vulnerabilities. These vulnerabilities stem from a race condition in the afsmakecall function when sending asynchronous messages, which may lead to reusing resources after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from a lifecycle management issue in the vub300 driver found in the drivers/mmc/host/vub300.c file. When the detection fails, it may lead to reusing resources after release...