CVE-2024-46856 net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe function is only used for DP83822 and DP83826 PHY, leaving the private data pointer uninitialized for the DP83825 models which causes a NULL pointer...

CVE-2024-46844: Access of Uninitialized Pointer

In the Linux kernel, the following vulnerability has been resolved: um: line: always fill errorout in setuponeline The pointer isn't initialized by callers, but I have encountered cases where it's still printed; initialize it in all possible cases in setuponeline...

kernel: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

A vulnerability was found in the Linux kernel's amdgpu driver in the amdgpuvceringparsecs function where the size variable is initialized with a pointer that may not be properly set before use. This issue could lead to unpredictable behavior in the system...

kernel: HID: i2c-hid-of: fix NULL-deref on failed power up

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures...

Windows Networking WNet Disclosure

The vulnerability of the Windows Networking WNet service in Windows operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this service...

HDF5 Heap Buffer Overflow DoS

The vulnerability of the h5toolsstrsprint function in the h5toolsstr.c file of the HDF5 library is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2024-7915

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 10.04.0 Description An issue was discovered in psi/zcolor.c, related to an unchecked Implementation pointer in Pattern color space, which could lead to arbitrary code execution. The vulnerability is...

CVE-2024-8645: Access of Uninitialized Pointer

SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file...

PT-2024-6243 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to an uninitialized pointer in the Windows Networking service, which can be exploited by a remote attacker to disclose protected information. This can potentially...

S390 kernel Heap Buffer Overflow DoS

The vulnerability of the virtto-phys function in the S390 kernel of the Linux operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20240906-02

Vulnerability of the kmemcachedestroy function of the lib/listdebug.c library of the Linux kernel is related to a buffer overrun. is related to an operation exceeding the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2273)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-48876 wifi: mac80211: fix initialization of rx->link and rx->link_sta

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix initialization of rx-link and rx-linksta There are some codepaths that do not initialize rx-linksta properly. This causes a crash in places which assume that rx-linksta is valid if rx-sta is valid. One known...

CVE-2024-42275: Access of Uninitialized Pointer

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix error code in drmclientbuffervmaplocal This function accidentally returns zero/success on the failure path. It leads to locking issues and an uninitialized mapcopy in the caller...

Windows TCP/IP Information Disclosure

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to gain access to confidential information...

PT-2024-4965 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the TCP/IP protocol in Windows operating systems and involves the use of an uninitialized pointer. Exploitation of this issue may allow a remot...

CLSA-2024-1720178212 krb5: Fix of CVE-2023-36054

CVE-2023-36054: fix uninitialized pointer in kadmrpcxdr.c to prevent kadmind crash...

PT-2024-6985

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the use of an uninitialized pointer in the setup one line function in the Linux kernel. This could potentially allow an attacker to impact the confidentiality,...

CVE-2021-47602: Access of Uninitialized Pointer

In the Linux kernel, the following vulnerability has been resolved: mac80211: track only QoS data frames for admission control For admission control, obviously all of that only works for QoS data frames, otherwise we cannot even access the QoS field in the header. Syzbot reported see below an...

CVE-2024-36966: Access of Uninitialized Pointer

In the Linux kernel, the following vulnerability has been resolved: erofs: reliably distinguish block based and fscache mode When erofskillsb is called in block dev based mode, sbdev may not have been initialised yet, and if CONFIGEROFSFSONDEMAND is enabled, it will be mistaken for fscache mode,...