GSD-2023-1001478 mtd: Fix device name leak when register device failed in add_mtd_device()

mtd: Fix device name leak when register device failed in addmtddevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000786 mtd: Fix device name leak when register device failed in add_mtd_device()

mtd: Fix device name leak when register device failed in addmtddevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33863 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns a device name leak that occurs when registering a device fails in the add mtd device function. This problem was introduced in version v2.6.30 and is fixed in Linux Kernel...

PT-2025-54036

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to HID devices and uclogic handling. Specifically, an incorrect device reference for devm allocation of the input device name could lead to a...

PT-2022-27589 · Tenda · Tenda Ac6V1.0

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the devName parameter in the formSetDeviceName function. This issue can be exploited, potentially allowing unauthorized access or control...

Tenda AC6 安全漏洞

Tenda AC6 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC6 version V1.0 V15.03.05.19, which originates from a buffer overflow vulnerability via the devName parameter in the formSetDeviceName function...

Tenda AC18 formSetDeviceName function buffer overflow vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a buffer overflow vulnerability that stems from the formSetDeviceName function that allows an attacker to implement a buffer...

CVE-2022-44158

Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via setdevicename...

PT-2022-27126 · Tenda · Tenda Ac21

Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow that can be triggered via the set device name function. This allows for potential exploitation. Recommendations: For Tenda AC21 version 16.03.08.15, conside...

Tenda AC21 缓冲区错误漏洞

The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which is caused by the setdevicename function not checking the length and size of the input data, and can be exploited to cause a denial of service...

kernel: ptp: Fix possible memory leak in ptp_clock_register()

In the Linux kernel, the following vulnerability has been resolved: ptp: Fix possible memory leak in ptpclockregister I got memory leak as follows when doing fault injection test: unreferenced object 0xffff88800906c618 size 8: comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 age 13.188s hex...

kernel: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()

A flaw was found in the smc module in the Linux kernel. A NULL pointer dereference can be triggered due to a missing check before calling the devname function, resulting in a denial of service...

Tenda AC21 缓冲区错误漏洞

Tenda AC21 is a wireless router from Tenda China. Tenda AC21 version V16.03.08.15 contains a buffer overflow vulnerability, which originates from the lack of length checking of the formSetDeviceName function in /bin/httpd for input data, and can be exploited to cause httpd to restart via the...

D-Link DIR-820L Remote Code Execution Vulnerability

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution...

VulnCheck KEV: CVE-2022-26258

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution...

SUSE-SU-2022:2880-1 Security update for dpdk

This update of dpdk fixes the following issue: - Fix to read PCI device name as UTF strings bsc1198873 - Allow configuring thread granularity of Kernel NIC Interface bsc1195172 - Rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

libinput security update

1.16.3-3 - Fix a format string vulnerability in the device name logging 2076815 CVE-2022-1215...

TOTOLINK EX1200T Command Injection Vulnerability

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK.A command injection vulnerability exists in TOTOLINK EX1200T, which stems from a remote command injection issue in the setDeviceName function of the global.so file, which could be exploited to control the device nam...

CVE-2021-42884

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack...

TOTOLINK EX1200T 操作系统命令注入漏洞

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK.A command injection vulnerability exists in TOTOLINK EX1200T, which stems from a remote command injection issue in the setDeviceName function of the global.so file, which could be exploited to control the device nam...