CVE-2021-47478

CVE-2021-47478 – isofs in the Linux kernel : The vulnerability arises when reading inodes from a corrupted isofs image, allowing an out-of-bounds read beyond the end of the buffer. The root cause is insufficient sanity checks on the directory entry length, which could be exploited during isofs_re...

CVE-2023-52793

CVE-2023-52793 is rejected by its CVE Numbering Authority and does not represent an active vulnerability entry.

CVE-2023-52793

Removed by vendor...

CVE-2021-47383

In the Linux kernel, the following vulnerability has been resolved: tty: Fix out-of-bound vmalloc access in imageblit This issue happens when a userspace program does an ioctl FBIOPUTVSCREENINFO passing the fbvarscreeninfo struct containing only the fields xres, yres, and bitsperpixel with values...

CVE-2021-47274

In the Linux kernel, the following vulnerability has been resolved: tracing: Correct the length check which causes memory corruption We've suffered from severe kernel crashes due to memory corruption on our production environment, like, Call Trace: 1640542.554277 general protection fault: 0000 1...

CVE-2021-47383 tty: Fix out-of-bound vmalloc access in imageblit

In the Linux kernel, the following vulnerability has been resolved: tty: Fix out-of-bound vmalloc access in imageblit This issue happens when a userspace program does an ioctl FBIOPUTVSCREENINFO passing the fbvarscreeninfo struct containing only the fields xres, yres, and bitsperpixel with values...

CVE-2021-47286

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Validate channel ID when processing command completions MHI reads the channel ID from the event ring element sent by the device which can be any value between 0 and 255. In order to prevent any out of bound...

CVE-2021-47274

In the Linux kernel, the following vulnerability has been resolved: tracing: Correct the length check which causes memory corruption We've suffered from severe kernel crashes due to memory corruption on our production environment, like, Call Trace: 1640542.554277 general protection fault: 0000 1...

CVE-2024-35949

In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadata blocks We previously would call btrfscheckleaf if we had the check integrity code enabled, which meant that we could only run the extended leaf checks if we had WRITTEN set on...

CVE-2024-35949 btrfs: make sure that WRITTEN is set on all metadata blocks

In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadata blocks We previously would call btrfscheckleaf if we had the check integrity code enabled, which meant that we could only run the extended leaf checks if we had WRITTEN set on...

CVE-2024-35949

CVE-2024-35949 affects the Linux kernel's btrfs subsystem. The root cause was that WRITTEN was not ensured on all metadata blocks, allowing potential corruption if extended leaf checks were skipped for blocks without WRITTEN. The fix adds checks to ensure WRITTEN is set and guarantees that __btrf...

CVE-2024-35949 btrfs: make sure that WRITTEN is set on all metadata blocks

In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadata blocks We previously would call btrfscheckleaf if we had the check integrity code enabled, which meant that we could only run the extended leaf checks if we had WRITTEN set on...

RHEL 7 : libtasn1 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libtasn1: Stack-based buffer overflow in asn1findnode CVE-2017-6891 - libtasn1: Out-of-bound access in...

RIOT 2024.01 Buffer Overflows / Lack Of Size Checks / Out-Of-Bound Access

-- HNS-2024-07 - HN Security Advisory - https://security.humanativaspa.it/ Title: Multiple vulnerabilities in RIOT OS OS: RIOT Date: 2024-05-07 CVE ID and severity: CVE-2024-31225 - High CVE-2024-32017 - Critical CVE-2024-32018 - High low-severity vulnerabilities were not assigned a CVE ID Vendor...

CVE-2024-26971

A vulnerability was found in the Linux Kernel's qcom gcc-ipq5018.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-26970

A vulnerability was found in the Linux Kernel's qcom gcc-ipq6018.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-26969

A vulnerability was found in the Linux Kernel's qcom gcc-ipq8074.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-26968

A vulnerability was found in the Linux Kernel's qcom gcc-ipq9574.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-26966

A vulnerability was found in the Linux Kernel's qcom mmcc-apq8084.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-26967

A vulnerability was found in the Linux Kernel's qcom camcc-sc8280xp.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...