Design/Logic Flaw

The iaware module has a Use-After-Free UAF vulnerability. Successful exploitation of this vulnerability may affect the system functions...

CVE-2023-52115

The CVE-2023-52115 entry concerns the iaware module with a Use-After-Free (UAF) vulnerability that may affect system functions. CVSS data indicate HIGH availability impact, Network attack vector, Low attack complexity, No privileges required, No user interaction. Connected documents tie this to H...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

RLSA-2024:0134 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: use after free in unixstreamsendpage CVE-2023-4622 kernel: vmwgfx: reference count issue leads to use-after-free in surface handli...

kernel security update

4.18.0-513.11.1.0.19.OL8 - scsi: iscsitcp: Fix UAF during login when accessing the shost ipaddress CVE-2023-2162 - afunix: Fix null-ptr-deref in unixstreamsendpage CVE-2023-4622 - netfilter: ipset: add the missing IPSETHASHWITHNET0 macro for ipsethashnetportnet CVE-2023-42753...

CVE-2022-2602

iouring UAF, Unix SCM garbage collection...

Code injection

iouring UAF, Unix SCM garbage collection...

CVE-2022-2602

iouring UAF, Unix SCM garbage collection...

CVE-2022-2602

iouring UAF, Unix SCM garbage collection...

CVE-2022-2602

CVE-2022-2602 is a Linux kernel vulnerability in io_uring related to a use-after-free in the Unix garbage collection path. Multiple connected sources confirm a local, kernel-side issue (io_uring UAF) that can be exploited to crash the kernel and, in PoC scenarios, enable privilege escalation by r...

CVE-2023-49142 multimedia audio has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

CVE-2023-49142 multimedia audio has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

CVE-2023-49135 multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

CVE-2023-49135 multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

CVE-2023-48360 multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

CVE-2023-48360 multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

CVE-2023-47857 multimedia camera has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer...

kernel security update

5.14.0-362.13.0.13.OL9 - cifs: Fix UAF in cifsdemultiplexthread Zhang Xiaoxu Steve French CVE-2023-1192 - fs/smb/client: Reset password pointer to NULL Quang Le Steve French CVE-2023-5345 - igb: set max size RX buffer when store bad packet is enabled Tony Nguyen David S. Miller CVE-2023-45871 -...

CVE-2023-40077

In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Race condition

In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...