netcdf:fuzz_open: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5383087167963136 Project: netcdf Fuzzing Engine: libFuzzer Fuzz Target: fuzzopen Job Type: libfuzzerubsannetcdf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5701dc77bfe0 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

DEBIAN-CVE-2024-36006

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix incorrect list API usage Both the function that migrates all the chunks within a region and the function that migrates all the entries within a chunk call listfirstentry on the respective lists without...

CVE-2024-36006

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix incorrect list API usage Both the function that migrates all the chunks within a region and the function that migrates all the entries within a chunk call listfirstentry on the respective lists without...

SUSE CVE-2024-27402

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skbqueueempty use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skbpeek unexpectedly returning NULL or a pointer to an already dequeued socket buffer...

libvips:webpsave_buffer_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5688495300476928 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: webpsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x56a0052c4e62 Crash State: NULL Sanitizer: address ASAN...

DEBIAN-CVE-2023-52678

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Confirm list is non-empty before utilizing listfirstentry in kfdtopology.c Before using listfirstentry, make sure to check that list is not empty, if list is empty return -ENODATA. Fixes the below:...

CVE-2023-52678

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Confirm list is non-empty before utilizing listfirstentry in kfdtopology.c Before using listfirstentry, make sure to check that list is not empty, if list is empty return -ENODATA. Fixes the below:...

CVE-2023-52678 drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Confirm list is non-empty before utilizing listfirstentry in kfdtopology.c Before using listfirstentry, make sure to check that list is not empty, if list is empty return -ENODATA. Fixes the below:...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to verify that a list is non-empty before using listfirstentry in kfdtopology.c. The vulnerability...

go-pprof:FuzzParseData: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5054416427220992 Project: go-pprof Fuzzing Engine: libFuzzer Fuzz Target: FuzzParseData Job Type: libfuzzerasango-pprof Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN...

expr:fuzz_expr: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4660506639007744 Project: expr Fuzzing Engine: libFuzzer Fuzz Target: fuzzexpr Job Type: libfuzzerasanexpr Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended Securit...

PT-2024-29600 · WordPress · Build App Online

Name of the Vulnerable Software and Affected Versions: Build App Online plugin for WordPress versions up to, and including, 3.0.5 Description: The issue is due to the eb user email verification key default value being empty and the missing not empty check in the eb user email verify function. Thi...

WordPress Edwiser Bridge plugin <= 3.0.5 - Authentication Bypass due to Missing Empty Value Check vulnerability

Authentication Bypass due to Missing Empty Value Check vulnerability discovered by István Márton in WordPress Plugin Edwiser Bridge versions = 3.0.5...

go-readline:FuzzReadline: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4512138713432064 Project: go-readline Fuzzing Engine: libFuzzer Fuzz Target: FuzzReadline Job Type: libfuzzerasango-readline Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN...

PT-2024-4102

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the mas empty area rev function within the lib/maple tree.c module of the Linux kernel. This occurs when mas start is called followe...

go-dhcp:fuzz_DHCPv4: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6694775840374784 Project: go-dhcp Fuzzing Engine: libFuzzer Fuzz Target: fuzzDHCPv4 Job Type: libfuzzerasango-dhcp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

multierr:FuzzCombine: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6426290858033152 Project: multierr Fuzzing Engine: libFuzzer Fuzz Target: FuzzCombine Job Type: libfuzzerasanmultierr Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN...

metallb:fuzz_ReadOpen: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6133367853613056 Project: metallb Fuzzing Engine: libFuzzer Fuzz Target: fuzzReadOpen Job Type: libfuzzerasanmetallb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommend...

go-shlex:FuzzLexer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4870258740494336 Project: go-shlex Fuzzing Engine: libFuzzer Fuzz Target: FuzzLexer Job Type: libfuzzerasango-shlex Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommende...

SUSE CVE-2024-26967

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...