CVE-2024-47687: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5vdpadevadd can end up releasing mr resources which never got initialized in the first place. This patch adds the missing check in mlx5vdpadestroymrresources ...

PT-2024-6733 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel. It involves the use of an uninitialized resource, which can be exploited by an attacker to gain elevat...

The vulnerability of the Linux operating system’s kernel component “hub”, which allows a hacker to trigger a service failure

The vulnerability of the Linux kernel’s hub component is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `__smsc75xx_read_reg()` function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smsc75xxreadreg function in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2024-46865: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized...

The vulnerability of the Authentication component of the Windows operating system, which allows a perpetrator to disclose protected information

The vulnerability of the Authentication component in the Windows operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Kernel-mode operating system driver for Windows allows a hacker to disclose sensitive information.

The vulnerability of the Kernel-mode operating system driver in Windows is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the AllJoyn API of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the AllJoyn API of the Windows operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows for the execution of arbitrary code.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2024-6242 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Windows Kernel-Mode Driver, which can be exploited to disclose protected information. This allows...

PT-2024-6254 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a component of the Windows operating system's authentication mechanism, specifically involving the use of an uninitialized resource. This can allow an attacker to...

PT-2024-6148

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Licensing Service affected versions not specified Description The vulnerability in the Windows Remote Desktop Licensing Service is related to the use of an uninitialized resource. Exploitation of this issue may allow a...

PT-2024-6253

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions 1607 through 10.0.14393.7336 Microsoft Windows 10 versions 1809 through 10.0.17763.6293 Microsoft Windows 10 versions 21h1 through 10.0.19044.4894 Microsoft Windows 10 versions 22h2 through 10.0.19041.4894 and...

CVE-2024-38260: Use of Uninitialized Resource

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...

CVE-2024-8654: Use of Uninitialized Resource

MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This issue affected MongoDB Server v6.0 version 6.0.3...

CVE-2024-8178: Use of Uninitialized Resource

The ctlwritebuffer and ctlreadbuffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process, which...

CVE-2024-44983: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan header Ensure there is sufficient room to access the protocol field of the VLAN header, validate it once before the flowtable lookup. ===================================================== BUG:...

CVE-2024-44999: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtpdevxmit syzbot/KMSAN reported use of uninit-value in getdevxmit 1 We must make sure the IPv4 or Ipv6 header is pulled in skb-head before accessing fields in them. Use pskbinetmaypull to fix this...

CVE-2024-45005: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix validity interception issue when gisa is switched off We might run into a SIE validity if gisa has been disabled either via using kernel parameter "kvm.usegisa=0" or by setting the related sysfs attribute to N echo...

The vulnerability of the vdpa/mlx5 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the vdpa/mlx5 component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...