Lucene search
K

120 matches found

OSV
OSV
added 2025/02/27 3:15 a.m.0 views

UBUNTU-CVE-2024-58002

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation. That pointer will be used when the device is done. Which could be anytime in the future...

7.8CVSS6.5AI score0.00012EPSS
Exploits0References49
OSV
OSV
added 2025/02/27 2:12 a.m.7 views

CVE-2024-58002 media: uvcvideo: Remove dangling pointers

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation. That pointer will be used when the device is done. Which could be anytime in the future...

7.8CVSS6AI score0.00012EPSS
Exploits0References13
Cvelist
Cvelist
added 2025/02/27 2:12 a.m.11 views

CVE-2024-58002 media: uvcvideo: Remove dangling pointers

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation. That pointer will be used when the device is done. Which could be anytime in the future...

0.00012EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2025/02/27 2:12 a.m.7 views

CVE-2024-58002

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation. That pointer will be used when the device is done. Which could be anytime in the future...

7.8CVSS5.7AI score0.00012EPSS
Exploits0
CVE
CVE
added 2025/02/27 2:12 a.m.157 views

CVE-2024-58002

CVE-2024-58002 — Linux kernel vulnerability (as reported in Astra Linux bulletin): In media: uvcvideo, an async control writes a pointer to the file handle that started an operation. If the user closes the file descriptor before the device completes, that structure is freed and a dangling pointer...

7.8CVSS6.5AI score0.00012EPSS
Exploits0References10Affected Software1
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from the media: uvcvideo module not clearing dangling pointers in asynchronous control...

7.8CVSS6.4AI score0.00012EPSS
Exploits0References6
OSV
OSV
added 2025/01/27 3:3 p.m.10 views

SUSE-SU-2025:0264-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. - CVE-2022-4895...

7.8CVSS8.4AI score0.0072EPSS
Exploits3References52
OSV
OSV
added 2025/01/27 12:4 p.m.6 views

SUSE-SU-2025:0249-1 Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024122 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. - CVE-2022-4895...

7.8CVSS8.1AI score0.00449EPSS
Exploits2References36
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2025-30777

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the rose rt device down function related to dangling neighbour pointers. Two bugs exist: modification of the loop bound t-count within a loop,...

7.8CVSS6.7AI score0.00052EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/12/12 12:0 a.m.16 views

SUSE SLES15 Security Update : kernel RT (Live Patch 14 for SLE 15 SP5) (SUSE-SU-2024:4125-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4125-1 advisory. This update for the Linux Kernel 5.14.21-1505001352 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic...

7.8CVSS7.1AI score0.0072EPSS
Exploits1References61
RedHat Linux
RedHat Linux
added 2024/09/24 2:39 a.m.2 views

kernel: KVM: arm64: Disassociate vcpus from redistributor region on teardown

A vulnerability was found in the Linux kernel's KVM for ARM64 within the vgic-init.c, vgic-mmio-v3.c, and vgic.h files. The virtual vCPUs may retain dangling pointers in a redistributor region after they have been torn down, leading to potential memory corruption...

7.8CVSS7.2AI score0.00021EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/09/24 12:40 a.m.3 views

kernel: KVM: arm64: Disassociate vcpus from redistributor region on teardown

A vulnerability was found in the Linux kernel's KVM for ARM64 within the vgic-init.c, vgic-mmio-v3.c, and vgic.h files. The virtual vCPUs may retain dangling pointers in a redistributor region after they have been torn down, leading to potential memory corruption...

7.8CVSS7.2AI score0.00021EPSS
Exploits0References5
OSV
OSV
added 2024/07/12 1:15 p.m.1 views

DEBIAN-CVE-2024-40989

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Disassociate vcpus from redistributor region on teardown When tearing down a redistributor region, make sure we don't have any dangling pointer to that region stored in a vcpu...

7.8CVSS5.9AI score0.00021EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2024/07/06 2:58 a.m.1 views

SUSE CVE-2024-39485

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Properly re-initialise notifier entry in unregister The notifierentry of a notifier is not re-initialised after unregistering the notifier. This leads to dangling pointers being left there so use listdelinit to...

5.3CVSS7.6AI score0.00033EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2024/07/05 10:23 a.m.20 views

CVE-2024-39485

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Properly re-initialise notifier entry in unregister The notifierentry of a notifier is not re-initialised after unregistering the notifier. This leads to dangling pointers being left there so use listdelinit to...

4.4CVSS6.8AI score0.00033EPSS
Exploits0References4
OSV
OSV
added 2024/07/05 7:15 a.m.2 views

AZL-43261 CVE-2024-39485 affecting package kernel for versions less than 5.15.162.2-1

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Properly re-initialise notifier entry in unregister The notifierentry of a notifier is not re-initialised after unregistering the notifier. This leads to dangling pointers being left there so use listdelinit to...

5.5CVSS6.7AI score0.00033EPSS
Exploits0References1
OSV
OSV
added 2024/07/05 7:15 a.m.0 views

UBUNTU-CVE-2024-39485

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Properly re-initialise notifier entry in unregister The notifierentry of a notifier is not re-initialised after unregistering the notifier. This leads to dangling pointers being left there so use listdelinit to...

5.5CVSS6.1AI score0.00033EPSS
Exploits0References13
Cvelist
Cvelist
added 2024/07/05 6:55 a.m.32 views

CVE-2024-39485 media: v4l: async: Properly re-initialise notifier entry in unregister

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Properly re-initialise notifier entry in unregister The notifierentry of a notifier is not re-initialised after unregistering the notifier. This leads to dangling pointers being left there so use listdelinit to...

0.00033EPSS
Exploits0References3
OSV
OSV
added 2024/04/25 6:15 a.m.2 views

DEBIAN-CVE-2024-26923

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix garbage collector racing against connect Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCMRIGHTS, two consecutiv...

4.7CVSS5.6AI score0.00013EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/03/24 12:0 a.m.2 views

Qt 安全漏洞

Qt is a cross-platform C++ application development framework from the Norwegian company Qt. It is widely used to develop GUI programs, in which case it is also known as the widget toolkit. It can also be used to develop non-GUI programs, such as console tools and servers. A security vulnerability...

6.5CVSS6.3AI score0.0008EPSS
Exploits0References3
Rows per page
Query Builder