CVE-2023-52678 drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Confirm list is non-empty before utilizing listfirstentry in kfdtopology.c Before using listfirstentry, make sure to check that list is not empty, if list is empty return -ENODATA. Fixes the below:...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to verify that a list is non-empty before using listfirstentry in kfdtopology.c. The vulnerability...

go-pprof:FuzzParseData: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5054416427220992 Project: go-pprof Fuzzing Engine: libFuzzer Fuzz Target: FuzzParseData Job Type: libfuzzerasango-pprof Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN...

expr:fuzz_expr: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4660506639007744 Project: expr Fuzzing Engine: libFuzzer Fuzz Target: fuzzexpr Job Type: libfuzzerasanexpr Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended Securit...

PT-2024-29600 · WordPress · Build App Online

Name of the Vulnerable Software and Affected Versions: Build App Online plugin for WordPress versions up to, and including, 3.0.5 Description: The issue is due to the eb user email verification key default value being empty and the missing not empty check in the eb user email verify function. Thi...

WordPress Edwiser Bridge plugin <= 3.0.5 - Authentication Bypass due to Missing Empty Value Check vulnerability

Authentication Bypass due to Missing Empty Value Check vulnerability discovered by István Márton in WordPress Plugin Edwiser Bridge versions = 3.0.5...

go-readline:FuzzReadline: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4512138713432064 Project: go-readline Fuzzing Engine: libFuzzer Fuzz Target: FuzzReadline Job Type: libfuzzerasango-readline Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN...

PT-2024-4102

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the mas empty area rev function within the lib/maple tree.c module of the Linux kernel. This occurs when mas start is called followe...

go-dhcp:fuzz_DHCPv4: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6694775840374784 Project: go-dhcp Fuzzing Engine: libFuzzer Fuzz Target: fuzzDHCPv4 Job Type: libfuzzerasango-dhcp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

multierr:FuzzCombine: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6426290858033152 Project: multierr Fuzzing Engine: libFuzzer Fuzz Target: FuzzCombine Job Type: libfuzzerasanmultierr Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN...

metallb:fuzz_ReadOpen: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6133367853613056 Project: metallb Fuzzing Engine: libFuzzer Fuzz Target: fuzzReadOpen Job Type: libfuzzerasanmetallb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommend...

go-shlex:FuzzLexer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4870258740494336 Project: go-shlex Fuzzing Engine: libFuzzer Fuzz Target: FuzzLexer Job Type: libfuzzerasango-shlex Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommende...

SUSE CVE-2024-26967

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

SUSE CVE-2024-26968

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

SUSE CVE-2024-26970

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

gluon:fuzz_parse_dec: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4997670448988160 Project: gluon Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsedec Job Type: libfuzzerasangluon Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

astro-compiler:fuzz_scope_html: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5926038602317824 Project: astro-compiler Fuzzing Engine: libFuzzer Fuzz Target: fuzzscopehtml Job Type: libfuzzerasanastro-compiler Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address...

lotus:fuzz_block_msg: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5524585794568192 Project: lotus Fuzzing Engine: libFuzzer Fuzz Target: fuzzblockmsg Job Type: libfuzzerasanlotus Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

go-git:fuzz_parser: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4650681523830784 Project: go-git Fuzzing Engine: libFuzzer Fuzz Target: fuzzparser Job Type: libfuzzerasango-git Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

CVE-2024-27047

A vulnerability was found in the Linux kernel's net driver phydevice.c in the phygetinternaldelay function, where a lack of proper checks can cause a potential NULL pointer dereference to occur when the function attempts to access an empty array. The error occurs if the driver calls...