kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO

In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdiscpktleninit with UFO After commit 7c6d2ecbda83 "net: be more gentle about silly gso requests coming from user" virtionethdrtoskb had sanity check to detect malicious attempts from user space ...

bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

A data integrity error was found in the bzip2 User-space package functionality when decompressing. This issue occurs when a user decompresses a particular kind of .bz2 files. A local user could get unexpected results or corrupted data as result of decompressing these files...

CVE-2024-43049

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...

CVE-2024-43053

Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information...

CVE-2024-43050

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver...

CVE-2024-33040

Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access...

CVE-2024-33036

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access...

CVE-2024-43050 Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver...

CVE-2024-43050

CVE-2024-43050 describes memory corruption arising when userspace issues IOCTL commands to the WLAN driver to issue a factory test command. Multiple sources cite this as a stack-based/memory corruption issue inside the WLAN driver, with a local attack vector and high impact on confidentiality, in...

CVE-2024-43049

CVE-2024-43049 describes memory corruption when user-space IOCTLs attempt to set a generic private command in a WLAN driver. The issue is reported across multiple feeds (NVD/Red Hat/CIRCL) and centers on the IOCTL path in the WLAN driver, with a high impact in CVSS terms (Local access, Low comple...

CVE-2024-43049 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...

CVE-2024-43049 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...

CVE-2024-33036

CVE-2024-33036: Memory corruption in Qualcomm camera driver parsing sensor packets. The root cause is using a user-space variable during kernel memory allocation/parsing, which can trigger large allocations or invalid memory access. Documented impact is memory corruption with potential out-of-bou...

CVE-2024-33036 Use of Out-of-range Pointer Offset in Camera Driver

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access...

PT-2024-30275 · Qualcomm · Qualcomm Windows Wlan Host

Name of the Vulnerable Software and Affected Versions: Qualcomm Windows WLAN Host affected versions not specified Description: The issue involves memory corruption that occurs when invoking IOCTL calls from user space to read diagnostic information of the target WLAN. This corruption happens due ...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates when calling IOCTL calls from user space to set generic private commands in the WLAN driver, which may result in memory corruption if these commands are...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which stems from the presence of a redundant release command when freeing a buffer in user space, which could trigger a race condition in kernel space, resulting in...

PT-2024-30273 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: WLAN driver affected versions not specified Description: The issue involves memory corruption when invoking IOCTL calls from user space to issue a factory test command inside the WLAN driver. This can lead to unintended consequences. The...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which stems from a possible memory corruption when parsing sensor packets from a camera driver, if user-space variables are used for kernel-space memory allocation and...

PT-2024-25081 · Qualcomm · Qualcomm Snapdragon Auto To Xr2 5G Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto to XR2 5G Platform affected versions not specified Description: The issue involves memory corruption when analyzing sensor packets in the camera driver. A user-space variable is used while allocating memory in the...