The vulnerability of the mpc52xx_spiRemove() function in the driver’s drivers/spi/spi-mpc52xx.c file, which supports SPI devices in the Linux kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mpc52xxspiRemove function in the driver drivers/spi/spi-mpc52xx.c code, which supports SPI devices in the Linux kernel, stems from the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the skb_put_padto() function in the Ethernet Frame Handler driver’s kernel code (/drivers/net/ethernet/lantiq_etop.c) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the skbputpadto function in the Ethernet Frame Handler driver’s source code at /drivers/net/ethernet/lantiqetop.c in the Linux kernel involves copying buffers without checking their size. This constitutes a classic buffer overflow attack. Exploiting this vulnerability could...

The vulnerability of the dax_unshare_iter() function in the fs/dax.c module of the Linux operating system allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the daxunshareiter function in the fs/dax.c module of the Linux operating system’s kernel is related to the lack of checking for the returned value. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected informatio...

The vulnerability of the check_func_arg() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkfuncarg function in the kernel/bpf/verifier.c module of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the il_isr() function in the net/mac80211/util.c module of the iwlegacy component in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ilisr function in the net/mac80211/util.c module of the iwlegacy component of the Linux operating system is related to the execution of a loop without sufficient limitation on its execution count. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the `vfiopci_dev_in_denylist()` function in the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the vfiopcidevindenylist function in the Linux operating system is related to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of protected information...

The vulnerability of the ntfs_file_release() function in the fs/ntfs3/file.c file of the Linux kernel’s file system ntfs3 allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ntfsfilerelease function in the fs/ntfs3/file.c file of the Linux kernel’s file system ntfs3 is related to the elevation of privileges. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the irqreturn_t hi3110can_ist() function in the drivers/net/can/spi/hi311x.c module of the Linux kernel allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the irqreturnt hi3110canist function in the drivers/net/can/spi/hi311x.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the amdkfd_free_gtt_mem() function in the driver /drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdkfdfreegttmem function in the driver /drivers/gpu/drm/amd/amdgpu/amdgpuamdkfd.c of the Linux kernel lies in the reuse of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the setWizardCfg() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK T10 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setWizardCfg function /cgi-bin/cstecgi.cgi of the TOTOLINK T10 router software is related to the issue of data being written outside the buffer in memory when processing the parameter ssid5g. Exploiting this vulnerability allows a malicious actor to compromise the...

The vulnerability of the built-in boa server (/boafrm/formSysCmd) of the TOTOLINK EX1200T router’s microprogramming system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the built-in server boa /boafrm/formSysCmd of the TOTOLINK EX1200T router’s microprogramming system lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of the built-in boa server (/boafrm/formSysLog) of the TOTOLINK EX1200T router’s microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the built-in boa server /boafrm/formSysLog of the TOTOLINK EX1200T router’s microprogramming system is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the web interface of the risk management platforms IBM OpenPages and IBM OpenPages with Watson allows attackers to compromise the integrity of protected information.

The vulnerability of the web interface of IBM OpenPages and IBM OpenPages with Watson relates to the lack of traceability in the trust chain during certificate verification. Exploitation of this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the...

Astra Linux – Vulnerability in grub2

A flaw was discovered in the HFS filesystem. When reading the name of an HFS volume during the grubfsmount function, the HFS filesystem driver uses the user-provided volume name as input without properly verifying the length of that name. This issue may lead to a heap-based out-of-bounds write...

TencentOS Server 4: linux-firmware (TSSA-2024:0439)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0439 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 2: grub2 (TSSA-2022:0288)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0288 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

The vulnerability of the UploadCustomModule() function in the TOTOLink T10 router software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UploadCustomModule function in the TOTOLink T10 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the components of the Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager, which are used in network traffic analysis, network detection, and response systems, allows attackers to compromise the integrity of protected information.

The vulnerability of the API components of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager relates to improper authentication. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the AVEVA PI Data Archive database management system, related to errors in processing exceptional states, allows a intruder to trigger a service failure and compromise the integrity of the protected information.

The vulnerability of the AVEVA PI Data Archive database management system is related to an error in processing exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger service failures and compromise the integrity of the protected information...

The vulnerability of the built-in web server boa (/boafrm/formWlanRedirect) of the TOTOLINK X15 router’s microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the built-in web server boa /boafrm/formWlanRedirect of the TOTOLINK X15 router’s microprogramming software is related to the copying of buffers without checking the size of input data during the processing of the redirect-url parameter. Exploiting this vulnerability allows a...