CVE-2019-15099: NULL Pointer Dereference

drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor...

CVE-2019-15098: NULL Pointer Dereference

drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor...

PT-2019-3230

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.9 Description The issue is related to a driver error in the Linux kernel, specifically in the drivers/net/wireless/ath/ath6kl/usb.c file, which is associated with NULL pointer dereference errors. This can be...

PT-2019-3229

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.8 Description The issue is related to a driver error in the Linux kernel, specifically in the drivers/net/wireless/ath/ath10k/usb.c file, which is associated with null pointer dereference errors. An attacker,...

PT-2019-4473

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.9 Description The issue is related to a lack of protection for service data in the Linux kernel's drivers/net/can/usb/peak usb/pcan usb fd.c driver. It can be exploited by a malicious USB device, potentially...

CVE-2010-5332: Improper Restriction of Operations within the Bounds of a Memory Buffer

In the Linux kernel before 2.6.37, an out of bounds array access happened in drivers/net/mlx4/port.c. When searching for a free entry in either mlx4registervlan or mlx4registermac, and there is no free entry, the loop terminates without updating the local variable free thus causing out of array...

PT-2019-6600

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.37 Description The issue is related to an out of bounds array access in the Linux kernel, specifically in the drivers/net/mlx4/port.c file. This occurs when searching for a free entry in either the mlx4...

CVE-2012-6712: Improper Restriction of Operations within the Bounds of a Memory Buffer

In the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which will cause at least memory corruption...

CVE-2019-10126

A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiexuapparsetailies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences...

Design/Logic Flaw

An issue was discovered in the Linux kernel before 5.0. The function mdiobusregister in drivers/net/phy/mdiobus.c calls putdevice, which will trigger a fixedmdiobusinit use-after-free. This will cause a denial of service...

CVE-2019-12819

An issue was discovered in the Linux kernel before 5.0. The function mdiobusregister in drivers/net/phy/mdiobus.c calls putdevice, which will trigger a fixedmdiobusinit use-after-free. This will cause a denial of service...

CVE-2019-12819: Use After Free

An issue was discovered in the Linux kernel before 5.0. The function mdiobusregister in drivers/net/phy/mdiobus.c calls putdevice, which will trigger a fixedmdiobusinit use-after-free. This will cause a denial of service...

PT-2019-14473

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0.11 Description A NULL pointer dereference issue was discovered in the Linux kernel. This occurs in the fm10k init module function within drivers/net/ethernet/intel/fm10k/fm10k main.c due to the lack of error...

CVE-2018-19985

The function hsogetconfigdata in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads ifnum from the USB device as a u8 and uses it to index a small array, resulting in an object out-of-bounds OOB read that potentially allows arbitrary read in the kernel address space...

PT-2019-5418

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0 Description An issue in the Linux kernel is related to a use-after-free vulnerability in the mdiobus register function, located in drivers/net/phy/mdio bus.c. This function calls put device, which triggers a...

Information disclosure

An issue was discovered in the Linux kernel before 4.18.11. The ipddpioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel address information by leveraging CAPNETADMIN to read the ipddproute dev and next fields via an SIOCFINDIPDDPRT ioctl call...

CVE-2018-20511

An issue was discovered in the Linux kernel before 4.18.11. The ipddpioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel address information by leveraging CAPNETADMIN to read the ipddproute dev and next fields via an SIOCFINDIPDDPRT ioctl call...

CVE-2018-14856: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in dhdbusflowringcreateresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

PT-2018-2700

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.19.9 Description The issue is related to the function hso get config data in the Linux kernel, which reads data from a USB device and uses it to index an array. This can result in an object out-of-bounds read,...

PT-2018-2980

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.11 Description An issue in the Linux kernel allows local users to obtain sensitive kernel address information. This is achieved by leveraging CAP NET ADMIN to read the ipddp route dev and next fields via an...