107 matches found
CVE-2023-52807: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may...
PT-2024-11213 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the corruption of the pg bytes written value in the nfs do recoalesce function. The value of mirror-pg bytes written should only be updated after a successful attemp...
No space to leaf-coalesce
Space is not reclaimed during a garbage collection or leaf coalesce operation. SMlog reports "No space to leaf-coalesce... but enough space if skip snap-coalesce"...
SUSE CVE-2017-10979
An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in radcoalesce" - this allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code...
kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
A vulnerability was found in the Linux kernel's ethtool implementation in the ioctl handling of coalesce settings, where the system attempts to change coalesce settings using the ethtoolsetcoalesce function without verifying the availability of both the .getcoalesce and .setcoalesce callbacks,...
kernel: net: preserve skb_end_offset() in skb_unclone_keeptruesize()
In the Linux kernel, the following vulnerability has been resolved: net: preserve skbendoffset in skbunclonekeeptruesize syzbot found another way to trigger the infamous WARNONONCEdelta truesize value, we also need to make sure TCP wont fill new tailroom that pskbexpandhead was able to get from a...
kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
A vulnerability was found in the Linux kernel's ethtool implementation in the ioctl handling of coalesce settings, where the system attempts to change coalesce settings using the ethtoolsetcoalesce function without verifying the availability of both the .getcoalesce and .setcoalesce callbacks,...
kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
A vulnerability was found in the Linux kernel's ethtool implementation in the ioctl handling of coalesce settings, where the system attempts to change coalesce settings using the ethtoolsetcoalesce function without verifying the availability of both the .getcoalesce and .setcoalesce callbacks,...
kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
A vulnerability was found in the Linux kernel's ethtool implementation in the ioctl handling of coalesce settings, where the system attempts to change coalesce settings using the ethtoolsetcoalesce function without verifying the availability of both the .getcoalesce and .setcoalesce callbacks,...
poppler:qt_search_fuzzer: Segv on unknown address in TextPage::coalesce
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=6707892465565696 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...
PT-2025-8021
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue occurs when using page pool with page fragments in the Linux kernel. This problem arises during normal RX in the hns3 driver, where a page reference is dropped...
PT-2025-8070
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc4-syzkaller-00229-g4f12b742eb2b Description A vulnerability has been identified in the Linux kernel, specifically in the skb unclone keeptruesize function. The issue arises when the kernel fails to...
PT-2021-27011
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.5 Description The issue is related to a potential NULL dereference in the ethtool set coalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2024-11489
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential NULL pointer dereference in the ethtool set coalesce function. This function uses both the .get coalesce and .set coalesce callbacks, but the check fo...
CVE-2020-23894
A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...
Virtuozzo Automator 7.0 Update 2 Hotfix 14 (VA Agent: 7.0.2-402)
The Hotfix 14 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37546 The VA Agent could return an incorrect value for the 'counteriopsused' counter. Vulnerability id: PVA-37639 For containers migrated from Virtuozzo 6 or earlier, only full backups were...
PT-2021-28193
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. The crash state indicates the involvement of functions such as TextPool::getPool,...
poppler:pdf_fuzzer: Heap-buffer-overflow in TextPool::getPool
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=6182123317886976 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2020-5848)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5848 advisory. - nfsd: apply umask on fs without ACL support J. Bruce Fields Orabug: 31779884 CVE-2020-24394 - bcache: fix potential deadlock problem in...
