PT-2022-31339

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically with the PCI dwc component. It involves a problem with setting an error return on MSI DMA mapping...

GSD-2021-1000304 mt76: fix potential DMA mapping leak

mt76: fix potential DMA mapping leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit 91b9548d413fda488ea853cd1b9f59b572db3a0c,...

UVI-2021-1000397 mt76: fix potential DMA mapping leak

mt76: fix potential DMA mapping leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit 9fa26701cd1fc4d932d431971efc5746325bdfce...

UVI-2021-1000304 mt76: fix potential DMA mapping leak

mt76: fix potential DMA mapping leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit 91b9548d413fda488ea853cd1b9f59b572db3a0c,...

GSD-2021-1000397 mt76: fix potential DMA mapping leak

mt76: fix potential DMA mapping leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit 9fa26701cd1fc4d932d431971efc5746325bdfce...

PT-2021-24868

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.10.36 Description: A potential DMA mapping leak was identified in the mt76 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.10...

PT-2021-24775

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description A potential DMA mapping leak was identified in the mt76 module. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.10 and fixed in...

PT-2021-28769

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description A potential DMA mapping leak was identified in the mt76 component. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.10 and fixed...

PT-2021-28862

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.36 Description A potential DMA mapping leak was identified in the mt76 module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.10 throug...

PT-2024-11132 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mt76 driver, specifically the mt7615 component, where the first pointer in the txp needs to be unmapped to prevent DMA mapping entries from leaking...

kernel security, bug fix, and enhancement update

4.18.0-193.13.22.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 4.18.0-193.13.22 - Rebuild to get kernel image properly signed Bruno...

CVE-2019-18806

A flaw was found in the way the QLogic QLA3xxx NIC HBA Driver in the Linux kernel handled resource cleanup on a DMA mapping error. This flaw allows an attacker able to trigger the DMA mapping error to crash the system. Mitigation In order to mitigate this issue it is possible to prevent the...

CVE-2019-19056

A flaw was found in the way the mwifiex PCIE driver in the Linux kernel handled resource cleanup on a DMA mapping error. This flaw allows an attacker able to trigger the DMA mapping error to crash the system. Mitigation In order to mitigate this issue it is possible to prevent the affected code...

Linux kernel memory leak vulnerability (CNVD-2019-40155)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the qlalloclargebuffers function in drivers/net/ethernet/qlogic/qla3xxx.c in...

Memory corruption

A memory leak in the qlalloclargebuffers function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service memory consumption by triggering pcidmamappingerror failures, aka CID-1acb8f2a7a9f...

PT-2019-3985

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.5 Description The issue is related to a memory leak in the ql alloc large buffers function, which can lead to a denial of service due to memory consumption. This can be triggered by local users through pci dm...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "APFS" component. It does not properly restrict the DMA mapping time of FileVault decryption buffers, which allows attackers to read cleartext APFS data via a crafted Thunderbolt adapter...

CVE-2017-13786

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "APFS" component. It does not properly restrict the DMA mapping time of FileVault decryption buffers, which allows attackers to read cleartext APFS data via a crafted Thunderbolt adapter...

CVE-2017-13786

APFS DMA mapping timing vulnerability in macOS with versions before 10.13.1. The issue allows reading cleartext APFS data via a crafted Thunderbolt adapter due to insufficient restriction of DMA mapping time for FileVault decryption buffers. Apple’s security update 10.13.1 (and related Sierra/El ...

CVE-2017-13786: Undefined Security Weakness

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "APFS" component. It does not properly restrict the DMA mapping time of FileVault decryption buffers, which allows attackers to read cleartext APFS data via a crafted Thunderbolt adapter...