The vulnerability of the gpio_chrdev_release() function in the Linux kernel driver for GPIO operations allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gpiochrdevrelease function in the drivers/gpio/gpiolib-cdev.c file of the Linux kernel’s GPIO driver is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2024-27442 · Elastic · Kibana

Name of the Vulnerable Software and Affected Versions: Kibana affected versions not specified Description: A flaw was discovered in Kibana, allowing view-only users of alerting to use the "run soon API" making the alerting rule run continuously, potentially affecting the system availability if th...

Elastic Kibana Security Vulnerability

Elastic Kibana is an application from the Dutch company Elastic. A free and open user interface that enables you to visualize Elasticsearch data and lets you navigate through the Elastic Stack. A security vulnerability exists in Elastic Kibana versions 8.6.3 through 8.13.4, which stems from a...

SUSE CVE-2020-25709

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP's slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability...

PT-2025-14525 · Amd · Amd Npu Driver

Name of the Vulnerable Software and Affected Versions: AMD NPU Driver affected versions not specified Description: The issue is related to an integer overflow within the AMD NPU Driver, which could allow a local attacker to write out of bounds. This may potentially lead to loss of integrity or...

kernel: mm/sparsemem: fix race in accessing memory_section->usage

A race condition was found on a PFN in the Linux Kernel, which can fall into the device memory region with the system memory configuration. Normal zone start and end PFNs contain the device memory PFNs as well, and the compaction triggered will try on the device memory PFNs and end up in NOP. Thi...

The vulnerabilities of the functions dm_mq_init_request_queue() and dm_mq_cleanup_mapped_device() in the Linux kernel’s drivers/md/dm-rq.c file allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions dmmqinitrequestqueue and dmmqcleanupmappeddevice in the Linux kernel’s drivers/md/dm-rq.c file are related to the repeated release of previously released memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality,...

The vulnerability of the cfg80211_change_iface() function in the net/wireless/util.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cfg80211changeiface function in the net/wireless/util.c module of the Linux kernel is related to incorrect initialization of data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

PT-2024-5437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the crypto starfive module in the Linux kernel, where a variable length buffer allocated in the software stack for RSA text data is freed, causing undefined...

The vulnerability of the formDelDhcpRule() function (/goform/DelDhcpRule) in the Tenda W15E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formDelDhcpRule function /goform/DelDhcpRule in the Tenda W15E router software is related to the issue of the operation going beyond the buffer in memory when processing the delDhcpIndex parameter. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the formIPMacBindAdd() function (/goform/add_ip_mac_bind) in the Tenda W15E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formIPMacBindAdd function /goform/addipmacbind of the Tenda W15E router software lies in the issue of the operation going beyond the buffer in memory when processing the IPMacBindRule parameter. Exploiting this vulnerability allows an attacker to compromise the...

kernel: mm/sparsemem: fix race in accessing memory_section->usage

A race condition was found on a PFN in the Linux Kernel, which can fall into the device memory region with the system memory configuration. Normal zone start and end PFNs contain the device memory PFNs as well, and the compaction triggered will try on the device memory PFNs and end up in NOP. Thi...

edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message

A security flaw involving buffer overflow was identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker within the vicinity network to transmit a specifically crafted DHCPv6 proxy Advertise message, resulting in the...

kernel: netfilter: divide error in nft_limit_init

A denial of service flaw was found in nftlimitinit in netfilter's nftlimit in the Linux Kernel. This issue occurs due to an inappropriate math function selection, which may cause an availability threat...

PT-2024-3184 · Freerdp +9 · Freerdp +9

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 3.5.1 Description: The issue is related to an out-of-bounds read in the FreeRDP client, specifically in the freerdp image copy function. This can be exploited by a remote attacker to impact the confidentiality,...

The vulnerability of the fromDhcpListClient function (/goform/DhcpListClient) in the Tenda FH1203 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromDhcpListClient function /goform/DhcpListClient in the Tenda FH1203 router software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the formQuickIndex() function (/goform/QuickIndex) in the Tenda AC15 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formQuickIndex function /goform/QuickIndex of the Tenda AC15 router’s software lies in the fact that the operation outputs data beyond the buffer in memory when processing the PPPOEPassword parameter. Exploiting this vulnerability allows an attacker to compromise the...

gmp: Integer overflow and resultant buffer overflow via crafted input

A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from this vulnerability is to system availability...

The vulnerability of the function `of_pwm_single_xlate()` in the drivers/pwm/core.c file of the Linux operating system’s PWM device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PWM device driver in the Linux operating system involves reading memory beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the bpf_map_put() function in the kernel/bpf/syscall.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpfmapput function in the kernel/bpf/syscall.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...