CVE-2024-38412

CVE-2024-38412 is a memory-corruption issue linked to IOCTL handling of session errors in Qualcomm chipsets. Multiple connected sources confirm a kernel-space/ user-space IOCTL path as the root cause, with local access required and high impact to confidentiality, integrity, and availability per C...

SUSE-SU-2025:0328-1 Security update for clamav

This update for clamav fixes the following issues: New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. - Start clamonacc with --fdpass to avoid errors due to clamd not being able to...

PT-2025-2871 · Qualcomm · Snapdragon +45

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while processing IOCTL from user space, specifically to handle GPU AHB bus errors. This corruption...

The vulnerability of the jffs2 component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the jffs2 component in the Linux operating system’s kernel is related to errors that occur after release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the misc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the misc component in the Linux operating system’s kernel is related to errors that occur after release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the RIB Revalidation component of the networking routing implementation software on Unix-like systems allows a perpetrator to cause service interruptions.

The vulnerability of the RIB Revalidation component of the networking routing implementation software on Unix-like systems is related to errors in resource release. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20250203-11

A vulnerability in the luaupvaluejoin function lapi.c of the Lua script interpreter is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service Vulnerability in the luaresume ldo.c component of the Lua...

PT-2025-2509 · Qualcomm · Snapdragon +6

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when invoking IOCTL calls from user-space to kernel-space, specifically for handling session errors. Th...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Linux operating system’s DRM/AMDGPU cores allows a hacker to trigger a service failure.

The vulnerability of DRM/AMDGPU cores in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of the nilfs2 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the nilfs2 component in the Linux operating system’s kernel is related to errors that occur after deallocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the TCP component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the TCP component in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when processing IOCTL from user space to handle GPU AHB bus errors...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets suffer from an input validation error vulnerability that originates from a memory corruption that occurs during power-up or power-down of the camera sensor...

The vulnerability of the dw-axi-dmac component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the dw-axi-dmac component in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the DRM/Radeon kernel components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/Radeon kernel components in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to errors that occur after deallocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the IBM Engineering Requirements Management DOORS software lies in synchronization errors when using a common resource (“Race Situation”), allowing a perpetrator to execute arbitrary code.

The vulnerability of the IBM Engineering Requirements Management DOORS software is related to synchronization errors when using a shared resource „Race Condition“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...