14893 matches found
CVE-2024-46833: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: net: hns3: void array out of bound when loop tnlnum When query reg inf of SSU, it loops tnlnum times. However, tnlnum comes from hardware and the length of array is a fixed value. To void array out of bound, make sure the loop ti...
CVE-2024-46828: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: sched: schcake: fix bulk flow accounting logic for host fairness In schcake, we keep track of the count of active bulk flows per host, when running in dst/src host fairness mode, which is used as the round-robin weight when...
CVE-2024-46814: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check msgid before processing transcation WHY & HOW HDCPMESSAGEIDINVALID -1 is not a valid msgid nor is it a valid array index, and it needs checking before used. This fixes 4 OVERRUN issues reported by Coverity...
CVE-2024-46811: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index may exceed array range within fpuupdatebwboundingbox Why Coverity reports OVERRUN warning. soc.numstates could be 40. But array range of bwparams-clktable.entries is 8. How Assert if soc.numstates great...
CVE-2024-46804: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access Why Coverity reports OVERRUN warning. Do not check if array index valid. How Check msgid valid and valid array index...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking the validity of an index before accessing the bwparams array. No details of the vulnerability a...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from allowing array out-of-bounds...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not ensuring that the number of loops does not exceed the length of an array...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from failing to ensure that an endpoint index is within an array range when validating it...
CVE-2024-46818: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpioid before used as array index WHY & HOW GPIOIDUNKNOWN -1 is not a valid value for array index and therefore should be checked in advance. This fixes 5 OVERRUN issues reported by Coverity...
CVE-2024-46821: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index read Avoid using the negative values for clkidex as an index into an array pptable-DpmDescriptor. V2: fix clkindex return check Tim Huang...
kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing
A vulnerability has been identified in the Linux kernel, specifically involving a possible out-of-bounds array indexing within the net/wireless/nl80211.c file related to the wireless networking subsystem. This flaw can lead to a kernel-level crash, resulting in a denial-of-service condition for t...
kernel: protect the fetch of ->fd[fd] in do_dup2() from mispredictions
A flaw was found in the Linux kernel. The file descriptor duplication mechanism in the dodup2 function does not sanitize array indexing against speculative execution. A local user can exploit this flaw through processor branch mispredictions to trigger speculative out-of-bounds memory reads,...
kernel: vt_ioctl: fix array_index_nospec in vt_setactivate
A vulnerability was found in the Linux kernel's vtioctl subsystem, where the vtsetactivate function can lead to a transient integer underflow due to improper handling of the vsa.console value. The vulnerability arises when an out-of-bounds value is decreased before being sanitized using...
kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing
No description is available for this CVE...
kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing
No description is available for this CVE...
kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing
No description is available for this CVE...
kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing
No description is available for this CVE...
kernel: md: fix resync softlockup when bitmap size is less than array size
A flaw was found in the Linux kernel's Multiple Device md subsystem. A local user could exploit this vulnerability to cause a Denial of Service DoS by triggering a system hang. The issue occurs during Redundant Array of Independent Disks RAID resynchronization when the tracking bitmap size is...