CVE-2024-42228 drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value size when calling amdgpuvcecsreloc Initialize the size before calling amdgpuvcecsreloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate...

CVE-2024-42161 bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in the switch statement to initialize val'. GCC warns that val' may be used uninitialized in the BPFCREREADBITFIELD macro, defined in...

CVE-2024-42161

Technical details about CVE-2024-42161 are not publicly provided in the connected documents. The description mentions a Linux kernel BPF_CORE_READ_BITFIELD uninitialized value fix and a patch to initialize val, but there are no explicit affected products/versions or remediation steps beyond the p...

CVE-2024-42161 bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in the switch statement to initialize val'. GCC warns that val' may be used uninitialized in the BPFCREREADBITFIELD macro, defined in...

CVE-2024-42161

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in the switch statement to initialize val'. GCC warns that val' may be used uninitialized in the BPFCREREADBITFIELD macro, defined in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the bpf module in the BPFCOREREADBITFIELD macro, where the variable val may be uninitialized. This could...

CVE-2024-42228: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value size when calling amdgpuvcecsreloc Initialize the size before calling amdgpuvcecsreloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an uninitialized wxnumqvectors in the net:txgbe module when using MSI/INTx interrupts, resulting in a...

CVE-2024-42161: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in the switch statement to initialize val'. GCC warns that val' may be used uninitialized in the BPFCREREADBITFIELD macro, defined in...

UBUNTU-CVE-2024-41059

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copyname syzbot reported BUG: KMSAN: uninit-value in sizedstrscpy+0xc4/0x160 sizedstrscpy+0xc4/0x160 copyname+0x2af/0x320 fs/hfsplus/xattr.c:411 hfspluslistxattr+0x11e9/0x1a50 fs/hfsplus/xattr.c:750...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an uninitialized 0 in the result field of a command queue entry CQE when it is not in use, which could lead to...

wolfssl:cryptofuzz-heapmath: Use-of-uninitialized-value in Botan::operator-

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4852748728729600 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-heapmath Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

wolfssl:cryptofuzz-normal-math: Use-of-uninitialized-value in Botan::IntMod<Botan::PCurve::Secp256r1Rep<Botan::EllipticCurve<Botan::PCurve::se

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5851619005104128 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-normal-math Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

wolfssl:cryptofuzz-normal-math: Use-of-uninitialized-value in Botan::ProjectiveCurvePoint<Botan::IntMod<Botan::PCurve::secp256k1::Secp256k1Rep

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5355196484485120 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-normal-math Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

bitcoin-core:cryptofuzz-bitcoin-cryptography-w2-p2: Use-of-uninitialized-value in Botan::ProjectiveCurvePoint<Botan::IntMod<Botan::PCurve::secp256k1::Secp256k1Rep

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=6177037195214848 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-bitcoin-cryptography-w2-p2 Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type:...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in Botan::operator-

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4697449281683456 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...

bearssl:cryptofuzz-bearssl: Use-of-uninitialized-value in Botan::ProjectiveCurvePoint<Botan::IntMod<Botan::PCurve::secp256k1::Secp256k1Rep

Detailed Report: https://oss-fuzz.com/testcase?key=6052632997724160 Project: bearssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-bearssl Job Type: libfuzzermsanbearssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

bearssl:cryptofuzz-bearssl: Use-of-uninitialized-value in Botan::operator-

Detailed Report: https://oss-fuzz.com/testcase?key=5842119275642880 Project: bearssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-bearssl Job Type: libfuzzermsanbearssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Botan::operator-...

libecc:cryptofuzz-libecc: Use-of-uninitialized-value in Botan::IntMod<Botan::MontgomeryRep<Botan::EllipticCurve<Botan::PCurve::brainpool

Project: https://github.com/ANSSI-FR/libecc.git https://github.com/libecc/libecc.git Detailed Report: https://oss-fuzz.com/testcase?key=5344590727544832 Project: libecc Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libecc Job Type: libfuzzermsanlibecc Platform Id: linux Crash Type:...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in Botan::ProjectiveCurvePoint<Botan::IntMod<Botan::PCurve::secp256k1::Secp256k1Rep

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5187614846550016 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...