PT-2021-30157

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to the sch taprio function in the Linux Kernel, where a timer is not properly cancelled from taprio destroy. The actual impact and attack plausibility have not yet been...

PT-2021-26097

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description A potential issue exists in the Linux Kernel's sch taprio module, where a timer is not properly cancelled from the taprio destroy function. The actual impact and attack plausibility have not...

PT-2021-26052

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.153 Description The issue is related to the sch taprio function in the Linux Kernel, where a timer is not properly cancelled from taprio destroy. The actual impact and attack plausibility have not yet been...

PT-2021-30092

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description A potential issue exists in the Linux Kernel's sch taprio module, where a timer is not properly cancelled from the taprio destroy function. The actual impact and attack plausibility have not...

PT-2024-11415

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-rc6-syzkaller Description The issue is related to the sch taprio module in the Linux kernel, where a timer is not properly canceled when the taprio destroy function is called. This can lead to a...

CLSA-2021-1632262269 Fix of CVE: CVE-2021-34693, CVE-2021-20292, CVE-2021-28972, CVE-2021-20265, CVE-2021-32399, CVE-2014-4508, CVE-2021-3612, CVE-2021-3178, CVE-2021-37159, CVE-2021-38205, CVE-2021-3573, CVE-2021-38160

ELSCVE-666: CVE-2021-34693: can: bcm: fix infoleak in struct bcmmsghead - ELSCVE-705: CVE-2021-38160: virtioconsole: Assure used length from device is limited - ELSCVE-769: CVE-2014-4508: x8632, entry: Do syscall exit work on badsys CVE-2014-4508 - ELSCVE-844: CVE-2021-3573: Bluetooth: use...

C-ares Use-After-Free

The vulnerability of the aresDestroy and aresGetAddrInfo functions in the C-ares asynchronous DNS request library is related to the possibility of aresDestroy being called before aresGetAddrInfo has completed. Exploiting this vulnerability could allow a attacker to cause a service failure...

PT-2021-30957

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38550 Crash type: Heap-buffer-overflow READ 8 Crash state: ucl object dtor unref single ucl object dtor unref ucl hash destroy...

CVE-2021-30290

Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30290

Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

PT-2024-11434

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak vulnerability has been resolved in the Linux kernel. The issue occurred in the net/mlx5e module, specifically in the mlx5 core destroy cq function. When this function faile...

CVE-2021-32814

Skytable is a NoSQL database with automated snapshots and TLS. Versions prior to 0.5.1 are vulnerable to a a directory traversal attack enabling remotely connected clients to destroy and/or manipulate critical files on the host's file system. This security bug has been patched in version 0.5.1...

UBUNTU-CVE-2021-32686

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP before version 2.11.1, there are a couple of issues found in the SSL socket. First, a race condition between callback a...

PT-2024-11296

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was reported in the Linux kernel, specifically in the tcindex set parms function. The issue arises from a non-freed perfect hash in tcindex partial destroy work. When tcind...

PT-2021-8250 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference in the netfilter component of the Linux kernel, specifically in the nf tables module. This occurs when the chain-flags & NFT CHAIN HW...

PT-2024-11246 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak vulnerability has been resolved in the Linux kernel. The issue is related to the ip mc add1 src function, where an unreferenced object is created, leading to a memory lea...

UVI-2021-1000248 RDMA/rtrs-clt: destroy sysfs after removing session from active list

RDMA/rtrs-clt: destroy sysfs after removing session from active list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

PT-2024-11193 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak has been resolved in the Linux kernel, specifically in the drm/amd/amdgpu module. The issue occurs because the gem object rfb-base.obj0 is retrieved according to num...

Sql injection

In Progress MOVEit Transfer before 2021.0 13.0, a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used MySQL, Microsoft SQL Server...

AZL-6562 CVE-2021-33034 affecting package kernel for versions less than 5.10.78.1-1

In the Linux kernel before 5.12.4, net/bluetooth/hcievent.c has a use-after-free when destroying an hcichan, aka CID-5c4c8c954409. This leads to writing an arbitrary value...