16292 matches found
imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in ReadPSDChannelPixels
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6638247825965056 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
CVE-2024-51565
The hda driver is vulnerable to a buffer over-read from a guest-controlled value...
CVE-2024-51562
The NVMe driver function nvmeopcgetlogpage is vulnerable to a buffer over-read from a guest-controlled value...
CVE-2024-51565
The hda driver is vulnerable to a buffer over-read from a guest-controlled value...
CVE-2024-51562
The bhyve hypervisor in FreeBSD is vulnerable to a buffer over-read within the NVMe driver function nvme_opc_get_log_page. This flaw is triggered by a guest-controlled value, potentially allowing a malicious guest virtual machine to perform a denial of service (DoS) attack against the host or rea...
CVE-2024-51562
The NVMe driver function nvmeopcgetlogpage is vulnerable to a buffer over-read from a guest-controlled value...
kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg The Linux kernel CVE team has assigned CVE-2023-52528 to this issue. Upstream advisory:...
kernel: Kernel: Denial of Service in mmc: moxart due to improper return value check
A flaw was found in the Linux kernel component mmc: moxart. A local attacker with low privileges could exploit this vulnerability by triggering an improper return value check in the mmcaddhost function. This oversight can lead to a memory leak, which may ultimately cause a kernel crash, resulting...
kernel: bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
A vulnerability was found in the Linux kernel related to the improper handling of power-of-two values for CONFIGNRCPUS. The bitsper function incorrectly rounds up to the next power of two when given a power of two, causing crashes on certain systems...
kernel: ipv4: Fix uninit-value access in __ip_make_skb()
In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in ipmakeskb KMSAN reported uninit-value access in ipmakeskb 1. ipmakeskb tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a race condition. If calling setsockopt2 with...
kernel: mmc: atmel-mci: fix return value check of mmc_add_host()
In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehos...
kernel: mmc: omap_hsmmc: fix return value check of mmc_add_host()
A flaw was found in the OMAP HSMMC driver in the Linux kernel. The driver does not check the return value of mmcaddhost, which can lead to a memory leak from mmcallochost and a null pointer dereference crash in mmcremovehost when attempting to remove a device that was never successfully added...
kernel: mmc: alcor: fix return value check of mmc_add_host()
A flaw was found in the Linux kernel's Alcor Micro MMC card reader driver. When mmcaddhost fails, its return value is not checked, causing memory allocated by mmcallochost to leak. Additionally, the remove path may attempt to delete a device that was never added, leading to a kernel crash...
kernel: hsr: Fix uninit-value access in hsr_get_node()
In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsrgetnode KMSAN reported the following uninit-value access issue 1: ===================================================== BUG: KMSAN: uninit-value in hsrgetnode+0xa2e/0xa40 net/hsr/hsrframereg.c:2...
kernel: pstore/platform: Add check for kstrdup
In the Linux kernel, the following vulnerability has been resolved: pstore/platform: Add check for kstrdup Add check for the return value of kstrdup and return the error if it fails in order to avoid NULL pointer dereference...
kernel: block: refine the EOF check in blkdev_iomap_begin
In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdeviomapbegin blkdeviomapbegin rounds down the offset to the logical block size before stashing it in iomap-offset and checking that it still is inside the inode size. Check the isize check to th...
kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data registers register store validation for NFTDATAVALUE is conditional, however, the datatype is always either NFTDATAVALUE or NFTDATAVERDICT. This only requires a ne...
tpm2-tools: arbitrary quote data may go undetected by tpm2_checkquote
A flaw was found in the tpm2-tools package. This issue occurs due to a missing check whether the magic number in attest is equal to TPM2GENERATEDVALUE, which can allow an attacker to generate arbitrary quote data that may not be detected by tpm2checkquote...
