SUSE CVE-2020-7053

In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 and 5.x before 5.2, there is a use-after-free write in the i915ppgttclose function in drivers/gpu/drm/i915/i915gemgtt.c, aka CID-7dc40713618c. This is related to i915gemcontextdestroyioctl in...

SUSE CVE-2021-23133

A race condition in Linux kernel SCTP sockets net/sctp/socket.c before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctpdestroysock is called without socknetsk-sctp.addrwqlock then an element is removed from the...

SUSE CVE-2022-1419

The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject...

SUSE CVE-2022-3633

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939sessiondestroy of the file net/can/j1939/transport.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is...

Design/Logic Flaw

An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function...

MojoJson 代码问题漏洞

MojoJson is scott.cgi personal developer of an extremely simple and ultra-fast JSON parser . A security vulnerability exists in MojoJson v1.2.3, which can be exploited by an attacker to execute arbitrary code via the destroy function...

PT-2023-18839 · Mojojson · Mojojson

Name of the Vulnerable Software and Affected Versions: MojoJson version 1.2.3 Description: An issue was found that allows attackers to execute arbitrary code via the destroy function. Recommendations: For MojoJson version 1.2.3, consider disabling the destroy function as a temporary workaround...

CVE-2023-23087

An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function...

CVE-2023-23087: NULL Pointer Dereference

An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function...

CVE-2023-23087

An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function...

GSD-2023-1001535 dm cache: Fix UAF in destroy()

dm cache: Fix UAF in destroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit 034cbc8d3b47a56acd89453c29632a9c117de09d, it was...

GSD-2023-1001235 drm/i915/gvt: fix gvt debugfs destroy

drm/i915/gvt: fix gvt debugfs destroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000926 dm cache: Fix UAF in destroy()

dm cache: Fix UAF in destroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit d2a0b298ebf83ab6236f66788a3541e91ce75a70, it was...

GSD-2023-1000801 selftests/bpf: Fix memory leak caused by not destroying skeleton

selftests/bpf: Fix memory leak caused by not destroying skeleton This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000388 drm/i915/gvt: fix gvt debugfs destroy

drm/i915/gvt: fix gvt debugfs destroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit b85c8536fda3d1ed07c6d87a661ffe18d6eb214b...

PT-2025-25974 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A possible module reference underflow in the error path of the netfilter nf tables component has been identified. This issue occurs when nft expr clone fails, and dst-ops is set, but t...

GSD-2022-1007067 RDMA/siw: Fix QP destroy to wait for all references dropped.

RDMA/siw: Fix QP destroy to wait for all references dropped. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006809 RDMA/siw: Fix QP destroy to wait for all references dropped.

RDMA/siw: Fix QP destroy to wait for all references dropped. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

PT-2022-35592 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.148 Description: A bug has been identified in the nilfs mdt destroy function, potentially leading to a use-after-free UAF or general protection fault GPF issue. The actual impact and attack plausibility ha...

PT-2022-35799 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A bug has been identified in the nilfs mdt destroy function, potentially leading to a use-after-free UAF or general protection fault GPF issue. The actual impact and attack plausibility ha...