CVE-2023-25012

The Linux kernel through 6.1.9 has a Use-After-Free in bigbenremove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long...

CVE-2023-25012

The Linux kernel through 6.1.9 has a Use-After-Free in bigbenremove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long...

PT-2023-36721

Уязвимость функции intel context find active request модуля drivers/gpu/drm/i915/gt/intel context.c драйвера поддержки инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызват...

Security Bulletin: A vulnerability in OpenSSL affects IBM InfoSphere Information Server (CVE-2022-0778)

Summary A vulnerability in OpenSSL used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-0778 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw in the BNmodsqrt function when parsing certificates. By using a specially-crafted...

PT-2023-36763

Уязвимость функции mdp5 crtc reset модуля drivers/gpu/drm/msm/disp/mdp5/mdp5 crtc.c драйвера инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

virtio-win bug fix and enhancement update

An update is available for virtio-win. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virtio-win package provides paravirtualized network drivers for most...

Mali graphics processor Use-After-Free Privilege Escalation

The vulnerability of Mali graphics driver chips based on Midgard, Bifrost, and Valhall architectures is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges or gain unauthorized access to protected information...

PT-2023-36760

Уязвимость функции dmi sysfs register handle модуля drivers/firmware/dmi-sysfs.c драйвера прошивок ядра операционной системы Linux связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

GSD-2023-1001611 drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()

drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001600 drivers: dio: fix possible memory leak in dio_init()

drivers: dio: fix possible memory leak in dioinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001590 drivers: mcb: fix resource leak in mcb_probe()

drivers: mcb: fix resource leak in mcbprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001428 drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()

drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001404 drivers: dio: fix possible memory leak in dio_init()

drivers: dio: fix possible memory leak in dioinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001385 drivers: mcb: fix resource leak in mcb_probe()

drivers: mcb: fix resource leak in mcbprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001091 drivers: dio: fix possible memory leak in dio_init()

drivers: dio: fix possible memory leak in dioinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001070 drivers: mcb: fix resource leak in mcb_probe()

drivers: mcb: fix resource leak in mcbprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000657 drivers: mcb: fix resource leak in mcb_probe()

drivers: mcb: fix resource leak in mcbprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-36684

Уязвимость функции ath9k wmi cmd модуля drivers/net/wireless/ath/ath9k/wmi.c драйвера адаптеров беспроводной связи Atheros/Qualcomm ядра операционной системы Linux связана с записью за границами буфера. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность,...

Important: Red Hat Security Advisory: dpdk security update

An update for dpdk is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Important: Red Hat Security Advisory: dpdk security update

An update for dpdk is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...