Lucene search
K

56 matches found

NVD
NVD
added 2024/07/12 1:15 p.m.18 views

CVE-2024-40970

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

5.5CVSS0.00289EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2024/07/12 1:15 p.m.16 views

CVE-2024-40970

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

5.5CVSS6.4AI score0.00289EPSS
Exploits0References20
OSV
OSV
added 2024/07/12 1:15 p.m.1 views

UBUNTU-CVE-2024-40970

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

5.5CVSS6.2AI score0.00289EPSS
Exploits0References21
Cvelist
Cvelist
added 2024/07/12 12:32 p.m.23 views

CVE-2024-40970 Avoid hw_desc array overrun in dw-axi-dmac

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

0.00289EPSS
Exploits0References5
CVE
CVE
added 2024/07/12 12:32 p.m.108 views

CVE-2024-40970

The CVE-2024-40970 entry concerns a Linux kernel vulnerability in the dw-axi-dmac component that can cause a kernel panic due to an overrun of the hw_desc array when a descriptor chain expands (example: nr_buffers=3 with 3 segments per descriptor, totaling 9). The proposed fix, as described in mu...

5.5CVSS7.1AI score0.00289EPSS
Exploits0References6Affected Software1
Debian CVE
Debian CVE
added 2024/07/12 12:32 p.m.15 views

CVE-2024-40970

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

5.5CVSS5.7AI score0.00289EPSS
Exploits0
OSV
OSV
added 2024/07/12 12:32 p.m.13 views

CVE-2024-40970 Avoid hw_desc array overrun in dw-axi-dmac

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

5.5CVSS6.1AI score0.00289EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/07/12 12:0 a.m.2 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an array out-of-bounds that may occur in the dw-axi-dmac component when processing DMA channel descriptors...

5.5CVSS7.9AI score0.00289EPSS
Exploits0References7
NVD
NVD
added 2023/09/20 1:15 a.m.9 views

CVE-2023-25525

NVIDIA Cumulus Linux contains a vulnerability in forwarding where a VxLAN-encapsulated IPv6 packet received on an SVI interface with DMAC/DIPv6 set to the link-local address of the SVI interface may be incorrectly forwarded. A successful exploit may lead to information disclosure...

7.5CVSS7.2AI score0.00458EPSS
Exploits0References1
OSV
OSV
added 2022/09/17 12:0 a.m.12 views

GSD-2022-1005479 dmaengine: dw-axi-dmac: do not print NULL LLI during error

dmaengine: dw-axi-dmac: do not print NULL LLI during error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2022/09/17 12:0 a.m.11 views

GSD-2022-1005477 dmaengine: dw-axi-dmac: ignore interrupt if no descriptor

dmaengine: dw-axi-dmac: ignore interrupt if no descriptor This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

7.2AI score
Exploits0
Positive Technologies
Positive Technologies
added 2022/09/17 12:0 a.m.2 views

PT-2022-33737 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to the dmaengine, specifically the dw-axi-dmac, where it does not properly handle errors, potentially leading to information disclosure. The actual impact and attack...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/09/16 11:30 p.m.9 views

GSD-2022-1005092 dmaengine: dw-axi-dmac: do not print NULL LLI during error

dmaengine: dw-axi-dmac: do not print NULL LLI during error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2022/09/16 11:30 p.m.8 views

GSD-2022-1005091 dmaengine: dw-axi-dmac: ignore interrupt if no descriptor

dmaengine: dw-axi-dmac: ignore interrupt if no descriptor This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

7.2AI score
Exploits0
Positive Technologies
Positive Technologies
added 2022/09/16 12:0 a.m.2 views

PT-2022-33349 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue concerns ignoring interrupts if no descriptor is present in the dw-axi-dmac driver. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux...

7.2AI score
Exploits0References1
seebug.org
seebug.org
added 2016/08/23 12:0 a.m.29 views

DMac Web Industries product.php parameter id SQL injection vulnerability

No description provided by source...

7.1AI score
Exploits0
Rows per page
Query Builder