CVE-2024-42263: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix potential memory leak in the timestamp extension If fetching of userspace memory fails during the main loop, all drm sync objs looked up until that point will be leaked because of the missing drmsyncobjput. Fix it by...

PT-2024-6904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the incorrect blocking of resources in the v3d job start stats function of the Linux kernel. This can potentially allow an attacker to impact the confidentiality,...

PT-2024-5945

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.3-v8-16k-numa 151 Description The issue is related to an out-of-bounds read in the v3d csd job run function. This happens because the UAPI provides only seven configuration registers, but the code is reading...

PT-2024-29813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the validation of passed-in drm syncobj handles in the timestamp extension of the Linux kernel's drm/v3d component. If userspace provides an unknown or invalid handle...

PT-2024-29816

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to preventing out of bounds access in performance query extensions in the Linux kernel's drm/v3d component. It involves checking that the number of perfmons userspac...

PT-2024-29815

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential memory leak in the timestamp extension of the Linux kernel's drm/v3d component has been resolved. The issue occurs when fetching of userspace memory fails during the main loo...

PT-2022-31392

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.17.13 Description A null pointer dereference issue was discovered in the drm/v3d component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31686

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a null pointer dereference of the perfmon pointer in the drm/v3d component. This problem was introduced in Linux Kernel version v5.15 and is fixed in version v5.15.46...

PT-2022-31034

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.18.2 Description A null pointer dereference issue was discovered in the drm/v3d component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5....

USN-4225-1 linux, linux-aws, linux-azure, linux-azure-5.3, linux-gcp, linux-gcp-5.3, linux-kvm, linux-oracle, linux-raspi2 vulnerabilities

It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-14895, CVE-2019-14901 It was discovered that a...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4225-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4225-1 advisory. It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use...

Linux kernel resource management error vulnerability (CNVD-2019-41705)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the 'v3dsubmitclioctl' function in the drivers/gpu/drm/v3d/v3dgem.c file in versions of Linux kernel prior to 5.3.1...

CVE-2019-19044

Two memory leaks in the v3dsubmitclioctl function in drivers/gpu/drm/v3d/v3dgem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service memory consumption by triggering kcalloc or v3djobinit failures, aka CID-29cd13cfd762...

UBUNTU-CVE-2019-19044

Two memory leaks in the v3dsubmitclioctl function in drivers/gpu/drm/v3d/v3dgem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service memory consumption by triggering kcalloc or v3djobinit failures, aka CID-29cd13cfd762...

PT-2019-4091 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.11 Description: The issue is related to two memory leaks in the v3d submit cl ioctl function, located in drivers/gpu/drm/v3d/v3d gem.c. This can lead to a denial of service due to memory consumption when...