177 matches found
CVE-2024-38622 drm/msm/dpu: Add callback function pointer check before its call
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add callback function pointer check before its call In dpucoreirqcallbackhandler callback function pointer is compared to NULL, but then callback function is unconditionally called by this pointer. Fix this bug by...
CVE-2024-38622 drm/msm/dpu: Add callback function pointer check before its call
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add callback function pointer check before its call In dpucoreirqcallbackhandler callback function pointer is compared to NULL, but then callback function is unconditionally called by this pointer. Fix this bug by...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from the drm/msm/dpu module adding a check before calling a callback function pointer...
CVE-2022-48753 block: fix memory leak in disk_register_independent_access_ranges
In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in diskregisterindependentaccessranges kobjectinitandadd takes reference even when it fails. According to the doc of kobjectinitandadd If this function returns an error, kobjectput must be called to properl...
CVE-2024-26961 mac802154: fix llsec key resources release in mac802154_llsec_key_del
In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154llseckeydel mac802154llseckeydel can free resources of a key directly without following the RCU rules for waiting before the end of a grace period. This may lead to...
Server Side Template Injection (SSTI)
Summary Due to the unrestricted access to twig extension class from grav context, an attacker can redefine config variable. As a result, attacker can bypass previous patch. Details The twig context has a function declared called getFunction. php public function getFunction$name if...
CVE-2023-33064
Transient DOS in Audio when invoking callback function of ASM driver...
Design/Logic Flaw
Transient DOS in Audio when invoking callback function of ASM driver...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a denial of service issue in the audio when calling the callback function of the ASM driver...
CVE-2023-43570
A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code...
CVE-2023-43570
The CVE-2023-43570 entry involves the OemSmi driver, specifically its SMI callback function, where a local attacker with elevated privileges could execute arbitrary code. Documents consistently identify the vulnerable component as the OemSmi driver’s SMI callback, indicating local privilege escal...
CVE-2023-43570: Improper Input Validation
A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code...
CVE-2023-33055
Memory Corruption in Audio while invoking callback function in driver from ADSP...
CVE-2023-33055
CVE-2023-33055 corresponds to memory corruption in Qualcomm audio when a callback in the driver is invoked from the ADSP. The record shows a local attack vector with low privileges and no user interaction, and a high impact on confidentiality, integrity, and availability (CVSS v3.1: AV=L/AC=L/PR=...
CVE-2023-33055 Buffer Copy Without Checking Size of Input in Audio
Memory Corruption in Audio while invoking callback function in driver from ADSP...
CVE-2023-33055: Buffer Copy without Checking Size of Input
Memory Corruption in Audio while invoking callback function in driver from ADSP...
OESA-2023-1759 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnlosfaddcallback function did not validate the user mode controlled optnum field. This flaw allows a local privileged CAPNETADMIN attacker to trigger an...
AZL-31267 CVE-2023-39189 affecting package kernel for versions less than 5.15.135.1-2
A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnlosfaddcallback function did not validate the user mode controlled optnum field. This flaw allows a local privileged CAPNETADMIN attacker to trigger an out-of-bounds read, leading to a crash or information disclosure...
Linux kernel buffer error vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the nfnlosfaddcallback function failing to validate the optnum field of the user mode control. An attacker...