CVE-2021-47298

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix potential memory leak on unlikely error case If skblinearize is needed and fails we could leak a msg on the error handling. To fix ensure we kfree the msg block before returning error. Found during code review...

CVE-2021-47298 bpf, sockmap: Fix potential memory leak on unlikely error case

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix potential memory leak on unlikely error case If skblinearize is needed and fails we could leak a msg on the error handling. To fix ensure we kfree the msg block before returning error. Found during code review...

CVE-2021-47298

CVE-2021-47298 concerns the Linux kernel: a bpf/sockmap path could leak a message if skb_linearize fails, resolved by freeing the msg block before returning an error. Multiple connected advisories reference the same fix in the kernel; impact is a potential memory leak (no exploitation details pro...

CVE-2023-52688

A vulnerability was found in the ath12k Wi-Fi driver within the Linux kernel. This issue involves an error handler issue in the rfkill configuration, which could potentially disrupt Wi-Fi functionality and error handling processes. Mitigation Mitigation for this issue is either not available or t...

CVE-2023-52688

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix the error handler of rfkill config When the core rfkill config throws error, it should free the allocated resources. Currently it is not freeing the core pdev create resources. Avoid this issue by calling the co...

CVE-2024-35859 block: fix module reference leakage from bdev_open_by_dev error path

In the Linux kernel, the following vulnerability has been resolved: block: fix module reference leakage from bdevopenbydev error path At the time bdevmayopen is called, module reference is grabbed already, hence module reference should be released if bdevmayopen failed. This problem is found by...

CVE-2024-35859 block: fix module reference leakage from bdev_open_by_dev error path

In the Linux kernel, the following vulnerability has been resolved: block: fix module reference leakage from bdevopenbydev error path At the time bdevmayopen is called, module reference is grabbed already, hence module reference should be released if bdevmayopen failed. This problem is found by...

CVE-2024-35859

CVE-2024-35859 concerns the Linux kernel: a module reference leakage can occur in the bdev_open_by_dev error path. The vulnerability arises because a module reference is grabbed when bdev_may_open() is invoked and might not be released if that call fails. The issue was identified via code review ...

CVE-2024-35859

In the Linux kernel, the following vulnerability has been resolved: block: fix module reference leakage from bdevopenbydev error path At the time bdevmayopen is called, module reference is grabbed already, hence module reference should be released if bdevmayopen failed. This problem is found by...

CVE-2023-52688 wifi: ath12k: fix the error handler of rfkill config

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix the error handler of rfkill config When the core rfkill config throws error, it should free the allocated resources. Currently it is not freeing the core pdev create resources. Avoid this issue by calling the co...

CVE-2023-52688

CVE-2023-52688 affects the Linux kernel wifi driver ath12k, where an error path in the core rfkill config fail path did not free allocated resources. The issue could cause resource leaks by not destroying the core pdev when rfkill config initialization fails. The accompanying fix adds a call to c...

PT-2024-31854 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS versions up to 4.8 Description: A critical issue has been found, affecting the locate function of the function.php file, leading to sql injection. The attack can be launched remotely. Recommendations: For SEMCMS versions up to 4.8: Pat...

CVE-2024-26755

A vulnerability was found in the mdstartsync function in the md driver in the Linux kernel. This issue can cause a potential deadlock due to the improper suspension of the array during an interrupted reshape operation. This deadlock can prevent the operation from progressing and cause system...

CVE-2024-26755

In the Linux kernel, the following vulnerability has been resolved: md: Don't suspend the array for interrupted reshape mdstartsync will suspend the array if there are spares that can be added or removed from conf, however, if reshape is still in progress, this won't happen at all or data will be...

CVE-2024-26755 md: Don't suspend the array for interrupted reshape

In the Linux kernel, the following vulnerability has been resolved: md: Don't suspend the array for interrupted reshape mdstartsync will suspend the array if there are spares that can be added or removed from conf, however, if reshape is still in progress, this won't happen at all or data will be...

CVE-2024-26755 md: Don't suspend the array for interrupted reshape

In the Linux kernel, the following vulnerability has been resolved: md: Don't suspend the array for interrupted reshape mdstartsync will suspend the array if there are spares that can be added or removed from conf, however, if reshape is still in progress, this won't happen at all or data will be...

CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities

Today, CISA and the Federal Bureau of Investigation FBI released a joint Secure by Design Alert, Eliminating SQL Injection Vulnerabilities in Software. This Alert was crafted in response to a recent, well-publicized exploitation of SQL injection SQLi defects in a managed file transfer application...

CVE-2023-52587

A hard lockup flaw was found in the Linux kernel’s IPoIB driver in how a user triggers the ipoibmcastjointask function, caused by invalid priv-multicastlist locking. This flaw allows a local user to crash the system. Mitigation To mitigate this issue, prevent module ibcore from being loaded. Plea...

CVE-2023-52587

In the Linux kernel, the following vulnerability has been resolved: IB/ipoib: Fix mcast list locking Releasing the priv-lock while iterating the priv-multicastlist in ipoibmcastjointask opens a window for ipoibmcastdevflush to remove the items while in the middle of iteration. If the mcast is...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: IB/ipoib: Fix mcast list locking Releasing the priv-lock while iterating the priv-multicastlist in ipoibmcastjointask opens a window for ipoibmcastdevflush to remove the items while in the middle of iteration. If the mcast is...