CVE-2022-24958

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev-buf release...

Linux Kernel Code Issues and Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in the Linux kernel that stems from an error in the handling of dev-buf in the product /usb/gadget/legacy/inode.c file. The following products...

CVE-2022-24958: Release of Invalid Pointer or Reference

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev-buf release...

Gerbv resource management error vulnerability

Gerbv is a Gerber file Rs-274X only viewer. It is used to view Rs-274X Gerber files, Excellon drilling files, and Pick-N-Place files. A resource management error vulnerability exists in Gerbv that stems from the product RS-274X Aperture Definition Marker feature reusing released resources. An...

CVE-2021-4160 BN_mod_exp may produce incorrect results on MIPS

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

GLSA-202107-36 : urllib3: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-36 urllib3: Multiple vulnerabilities Multiple vulnerabilities have been discovered in urllib3. Please review the CVE identifiers referenced below for details. Impact : An attacker could cause a possible Denial of Service...

GLSA-202107-19 : Jinja: Denial of service

The remote host is affected by the vulnerability described in GLSA-202107-19 Jinja: Denial of service The urlize filter in Jinja utilized an inefficient regular expression that could be exploited to consume excess CPU. Impact : An attacker could cause a Denial of Service condition via crafted inp...

PT-2022-10776

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK V1.0 Description The issue is an integer overflow in the ION driver "/dev/ion" that could cause a system crash, resulting in a denial of service. This can be triggered using the ioctl cmd COMPAT ION IOC SUNXI...

Cross-site Scripting (XSS)

pimcore/pimcore is vulnerable to cross-site scripting XSS attacks. An attacker is able to bypass the validations due to improper input neutralization during web page generation. The vulnerability can be exploited via changing the rule name in the admin dev page allowing attackers to inject and...

PT-2022-10774

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK V1.0 Description The issue is related to a NULL pointer deference in the camera driver /dev/cedar dev. This could be exploited using the ioctl cmd IOCTL GET IOMMU ADDR to cause a system crash. Recommendations F...

Destructive malware targeting Ukrainian organizations

Microsoft Threat Intelligence Center MSTIC has identified evidence of a destructive malware operation targeting multiple organizations in Ukraine. This malware first appeared on victim systems in Ukraine on January 13, 2022. Microsoft is aware of the ongoing geopolitical events in Ukraine and...

Debian: Security Advisory (DLA-2877-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-8143

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0+ Description A race condition in the xsk socket teardown code can lead to a NULL pointer dereference. The issue arises when the xsk unbind dev function sets xs-state to XSK UNBOUND and xs-dev to NULL befor...

PT-2025-7974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified where the dev set name function's return value is not properly checked. If dev set name fails, dev name may return null, potential...

PT-2025-8403

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified, specifically in the btrfs module. The problem occurs when certain functions, such as btrfs qgroup inherit, btrfs alloc tree block, or btr...

PT-2025-8071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential overflow issue in the Linux kernel has been identified, specifically in the nbd dev add function when handling the first minor value. If the index is a large number, it may...

PT-2021-27221

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to a potential security vulnerability in the Linux Kernel, where the function ipip6 dev free is called from sit init net. The actual impact and attack plausibility have n...

PT-2021-27103

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.259 Description The issue is related to a potential security problem in the Linux Kernel, where the function ipip6 dev free is called from sit init net. The actual impact and attack plausibility have not ye...

PT-2021-27146

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description The issue is related to a potential security vulnerability in the Linux Kernel, where the function ipip6 dev free is called from sit init net. The actual impact and attack plausibility have n...

PT-2021-27173

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue is related to a potential security problem in the Linux Kernel, where the function ipip6 dev free is called from sit init net. The actual impact and attack plausibility have not yet...