The vulnerability of the dup_mmap() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dupmmap function in the kernel/fork.c module of the Linux operating system is related to the use of uninitialized memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

RHEL 7 : optipng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - optipng: heap buffer overflow in the bmpreadrows function CVE-2016-3981 - optipng: heap buffer overflow i...

RHEL 7 : freetype (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - freetype: heap-based buffer overflow related to the t1builderclosecontour function CVE-2017-8287 - The...

The vulnerability of the mraid_mm_register_adp() function in the SCSI MegaRaid driver for the Linux operating system allows a attacker to compromise the integrity of information or cause service failures.

The vulnerability of the mraidmmregisteradp function in the drivers/scsi/megaraid/megaraidmm.c file of the Linux operating system’s SCSI MegaRaid kernel relates to the potential access to uninitialized memory. Exploiting this vulnerability could allow an attacker to compromise the integrity of...

The vulnerability of the p9pdu_vreadf() function in the 9P network protocol implementation of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of information, and execute arbitrary code.

The vulnerability of the p9pduvreadf function in the net/9p/protocol.c module of the 9P network protocol implementation in the Linux operating system is related to the use of an uninitialized variable during memory deallocation. Exploiting this vulnerability could allow a remote attacker to...

kernel: ethtool: Fix uninitialized number of lanes

In the Linux kernel, the following vulnerability has been resolved: ethtool: Fix uninitialized number of lanes It is not possible to set the number of lanes when setting link modes using the legacy IOCTL ethtool interface. Since 'struct ethtoollinkksettings' is not initialized in this path, drive...

kernel: ext4: fix uninititialized value in 'ext4_evict_inode'

An uninitialized variable flaw was found in the Linux kernel's ext4 filesystem in the inode eviction path. A local user can trigger this issue by creating filesystem operations that cause inode allocation to fail before the iflags field is initialized, followed by inode cleanup that attempts to...

CVE-2021-47462

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: do not allow illegal MPOLFNUMABALANCING | MPOLLOCAL in mbind syzbot reported access to unitialized memory in mbind 1 Issue came with commit bda420b98505 "numa balancing: migrate on fault among multiple bound nodes"...

UBUNTU-CVE-2021-47462

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: do not allow illegal MPOLFNUMABALANCING | MPOLLOCAL in mbind syzbot reported access to unitialized memory in mbind 1 Issue came with commit bda420b98505 "numa balancing: migrate on fault among multiple bound nodes"...

CVE-2021-47462 mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: do not allow illegal MPOLFNUMABALANCING | MPOLLOCAL in mbind syzbot reported access to unitialized memory in mbind 1 Issue came with commit bda420b98505 "numa balancing: migrate on fault among multiple bound nodes"...

CVE-2021-47462

CVE-2021-47462 affects the Linux kernel mempolicy/memory policy handling. The root cause was an invalid combination check for MPOL_MODE_FLAGS: MPOL_F_NUMA_BALANCING may only pair with MPOL_BIND, but the check existed only in do_set_mempolicy(). The patch moves this validation into sanitize_mpol_f...

CVE-2021-47462 mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: do not allow illegal MPOLFNUMABALANCING | MPOLLOCAL in mbind syzbot reported access to unitialized memory in mbind 1 Issue came with commit bda420b98505 "numa balancing: migrate on fault among multiple bound nodes"...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from uninitialized memory...

CVE-2021-47297 net: fix uninit-value in caif_seqpkt_sendmsg

In the Linux kernel, the following vulnerability has been resolved: net: fix uninit-value in caifseqpktsendmsg When nrsegs equal to zero in iovecfromuser, the object msg-msgiter.iov is uninit stack memory in caifseqpktsendmsg which is defined in syssendmsg. So we cann't just judge...

UBUNTU-CVE-2024-35849

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfsioctllogicaltoino Syzbot reported the following information leak for in btrfsioctllogicaltoino: BUG: KMSAN: kernel-infoleak in instrumentcopytouser include/linux/instrumented.h:114 inline BUG:...

CVE-2024-30295 When Animate parses FLA files, there is a UAF vulnerability caused by referencing uninitialized memory at Animate.exe+0x1149dcf

Animate versions 24.0.2, 23.0.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

The vulnerability of the llc_conn_handler() function in the net/llc/llc_conn.c module, which is part of the LLC protocol implementation in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the llcconnhandler function in the net/llc/llcconn.c module, which is part of the LLC protocol implementation in Linux kernel, is related to the use of uninitialized memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `ip6_tnl_parse_tlv_enc_lim()` function in the `net/ipv6/ip6_tunnel.c` module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ip6tnlparsetlvenclim function in the net/ipv6/ip6tunnel.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...

The vulnerability of the __ip6_tnl_rcv() function in the net/ipv6/ip6_tunnel.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to disclose sensitive information or cause service failures.

The vulnerability of the ip6tnlrcv function in the net/ipv6/ip6tunnel.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause service...

RHEL 8 : php (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - php: Overflowing the length of string causes crash CVE-2017-8923 - PHP 7.1.5 has an Out of bounds access ...