Design/Logic Flaw

An issue was discovered in kmemcacheallocbulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel versions prior to 5.5.11 suffer from a contention condition issue vulnerability that stems from an issue found in kmemcacheallocbulk in mm/slub.c. slowpath lacks t...

Unbreakable Enterprise kernel security update

4.1.12-124.44.4 - scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS [email protected] Orabug: 32020790 4.1.12-124.44.3 - qed: Reduce verbosity of unimplemented MFW messages Mintz, Yuval Orabug: 31959299 - kexec: validate pe files against the systemblacklistkeyring Eric...

kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c

A flaw was found in the Linux kernel. A NULL pointer dereference flaw was found in the QLOGIC drivers for HBA. A call to allocworkqueue return was not validated and can cause a denial of service. The highest threat from this vulnerability is to system availability...

kernel: null-pointer dereference in drivers/net/fjes/fjes_main.c

A flaw was found in the Linux kernel. A NULL pointer dereference flaw was found in the FUJITSU Extended Socket Network driver. A call to the allocworkqueue return was not validated and causes a denial of service at the time of failure. The highest threat from this vulnerability is to system...

kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c

A flaw was found in the Linux kernel. A NULL pointer dereference flaw was found in the QLOGIC drivers for HBA. A call to allocworkqueue return was not validated and can cause a denial of service. The highest threat from this vulnerability is to system availability...

kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c

A flaw was found in the Linux kernel. A NULL pointer dereference flaw was found in the QLOGIC drivers for HBA. A call to allocworkqueue return was not validated and can cause a denial of service. The highest threat from this vulnerability is to system availability...

kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c

A flaw was found in the Linux kernel. A NULL pointer dereference flaw was found in the QLOGIC drivers for HBA. A call to allocworkqueue return was not validated and can cause a denial of service. The highest threat from this vulnerability is to system availability...

OSV-2020-1553 UNKNOWN READ in hb_realloc_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24497 Crash type: UNKNOWN READ Crash state: hbreallocimpl hbvectort::alloc hbvectort::resize...

Linux kernel resource management error vulnerability (CNVD-2020-41818)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the xfsagfverify file in fs/xfs/libxfs/xfsalloc.c in Linux kernel 5.6.10 and earlier. An attacker can exploit this vulnerability to...

kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c

A flaw was found in the Linux kernel. A check was not done on the allocworkqueue return value of the iwltranspciealloc function potentially leading to a NULL pointer dereference. This error condition could lead to a denial of service. The highest threat from this vulnerability is to system...

kernel: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allows for a DoS

A flaw was found in the Linux kernel. The Intel Wireless WiFi MVM Firmware driver mishandles resource cleanup during device coredump. An attacker able to trigger the device coredump and system-wide out of memory conditions at the same time could use this flaw to crash the system. The highest thre...

kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c

A flaw was found in the Linux kernel. A check was not done on the allocworkqueue return value of the iwltranspciealloc function potentially leading to a NULL pointer dereference. This error condition could lead to a denial of service. The highest threat from this vulnerability is to system...

PSKernel-Primitives

This repository contains a collection of PowerShell primitives for fuzzing and exploitation. The primitives are designed to be used in a Windows environment and are intended for use in red teaming and penetration testing. The repository includes the following primitives: 1. Alloc-NullPage.ps1:...

Huawei EulerOS: Security Advisory for procps-ng (EulerOS-SA-2018-1199)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux kernel memory leak vulnerability (CNVD-2019-41712)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory disclosure vulnerability exists in the 'allocsgtable' function in the drivers/net/wireless/intel/iwlwifi/fw/dbg.c file in Linux kernel 5.3.11 and earlier...

Linux kernel memory leak vulnerability (CNVD-2019-41713)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. The 'mwifiexpciealloccmdrspbuf' function in the drivers/net/wireless/marvell/mwifiex/pcie.c file in Linux kernel 5.3.11 and earlier versions A memory leak vulnerabilit...

DEBIAN-CVE-2019-19054

A memory leak in the cx23888irprobe function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering kfifoalloc failures, aka CID-a7b2df76b42b...

Linux kernel null pointer dereference vulnerability (CNVD-2019-31638)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A null pointer dereference vulnerability exists in Linux kernel 5.2.14. The vulnerability stems from drivers/net/fjes/fjesmain.c not checking the allocworkqueue return...

Linux kernel null pointer dereference vulnerability (CNVD-2019-31639)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A null pointer dereference vulnerability exists in Linux kernel 5.2.14. The vulnerability stems from ddrivers/gpu/drm/radeon/radeondisplay.c not checking the...