The vulnerability of the afu_mmio_region_get_by_offset function (drivers/fpga/dfl-afu-region.c) in Linux kernel allows a hacker to execute arbitrary code.

The vulnerability of the afummioregiongetbyoffset function drivers/fpga/dfl-afu-region.c in Linux operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

afu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow.

...

SUSE CVE-2023-26242

afummioregiongetbyoffset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow...

DEBIAN-CVE-2023-26242

afummioregiongetbyoffset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow...

AZL-13743 CVE-2023-26242 affecting package kernel for versions less than 5.15.135.1-2

afummioregiongetbyoffset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow...

UBUNTU-CVE-2023-26242

afummioregiongetbyoffset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow...

Linux kernel 输入验证错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an integer overflow in afummioregiongetbyoffset in drivers/fpga/dfl-afu-region.c. The vulnerability is cause...

PT-2023-1714

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 6.1.12 Description The issue is related to an integer overflow in the afu mmio region get by offset function in the Linux kernel. This function is located in the drivers/fpga/dfl-afu-region.c file. The integer...

PT-2022-35524 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A potential refcount leak issue exists in the afu ioctl function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-35072 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential refcount leak issue exists in the afu ioctl function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0....

PT-2022-35663 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: A potential refcount leak was discovered in the afu ioctl function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

vlearning.afu.ac.ae Cross Site Scripting vulnerability OBB-2916876

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2022-1002729 misc: ocxl: fix possible double free in ocxl_file_register_afu

misc: ocxl: fix possible double free in ocxlfileregisterafu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2016:1539 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

WordPress Contact Form 7 Plugin <= 3.5.2 - Remote Code Execution

Because of this vulnerability, attackers with admin access add uploader tag into contact form at the site and use it for CE via AFU attack. Solution Update the plugin...

Exponent CMS v0.97 Multiple Vulnerabilities

Summary Open Source Content Management System PHP+MySQL. Description Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure Vulnerability 2. Arbitrary File Upload / File Modify Vulnerability 3. Reflected Cross-Site Scripting Vulnerability 1 LFI/FD occurs whe...

Exponent CMS 0.97 - Multiple Vulnerabilities

Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure...