CVE-2024-56768: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpfgetsmpprocessorid on !CONFIGSMP On x86-64 calling bpfgetsmpprocessorid in a kernel with CONFIGSMP disabled can trigger the following bug, as pcpuhot is unavailable: 8.471774 BUG: unable to handle page fault for addres...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the bpf module, where a page fault error is triggered when calling bpfgetsmpprocessorid on an x86-64 kern...

CVE-2024-56761: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: x86/fred: Clear WFE in missing-ENDBRANCH CPs An indirect branch instruction sets the CPU indirect branch tracker IBT into WAITFORENDBRANCH WFE state and WFE stays asserted across the instruction boundary. When the decoder finds a...

libavif:[email protected]: Segv on unknown address in [email protected]

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=4573834451156992 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibavif Platform Id: linux Crash Type:...

vulkan-loader:instance_create_fuzzer: Segv on unknown address in loader_free_layer_properties

Detailed Report: https://oss-fuzz.com/testcase?key=6541440380895232 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: instancecreatefuzzer Job Type: libfuzzerasanvulkan-loader Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: loaderfreelayerproperties...

PT-2026-20438

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.9 Description The rtw core enable beacon function within the rtw88 module in the Linux kernel contains a flaw where it attempts to read 4 bytes from a memory address that is not properly aligned. This...

PT-2025-30759

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 6.16.0-20250531.rc0.git0.69b3a602feac.63.fc42.s390x+debug and earlier. Description A flaw exists in the Linux kernel related to handling in atomic within the do secure storage access function. User space accesses to...

PT-2025-40087

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw in the tcp bpf subsystem where sk msg free was not called when tcp bpf send verdict failed to allocate memory for psock-cork. This could lead to memory...

PT-2025-30863

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability exists in the Linux kernel related to GEM Graphics Execution Manager handles and framebuffers. A GEM handle can be released while still attached to a DRM Direct Rendering...

PT-2025-54223

Name of the Vulnerable Software and Affected Versions WasmEdge versions prior to 0.16.0-alpha.3 Description WasmEdge is a WebAssembly runtime. A multiplication operation within WasmEdge/include/runtime/instance/memory.h can result in a wrap-around, leading the checkAccessBound function to...

PT-2025-30875

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a time-of-check-to-time-of-use TOCTOU vulnerability in the vsock transport mechanism. A race condition can occur between transport assignment and module...

PT-2025-30800

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw was discovered in the Linux kernel related to the Network File System NFS. Specifically, the issue occurs when nfs fs proc net init fails, leading to the improper removal of the...

PT-2025-54220

Name of the Vulnerable Software and Affected Versions matio version 1.5.28 Description A memory corruption issue exists in the Mat VarCreateStruct function when the nfields value does not align with the actual number of strings within the fields array. This discrepancy can result in out-of-bounds...

PT-2026-5995

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to the dmaengine subsystem, specifically within the Xilinx XDMA driver. The max register field is incorrectly assigned the size of the registe...

PT-2025-21660

Name of the Vulnerable Software and Affected Versions: gnome-remote-desktop affected versions not specified Description: A flaw in gnome-remote-desktop can be triggered by a crafted RDP packet, causing a segmentation fault and resulting in a denial of service. The issue is likely due to a NULL...

PT-2026-21540

Name of the Vulnerable Software and Affected Versions strukturag libde265 versions prior to commit d9fea9d Description A segmentation fault exists in strukturag libde265 due to an issue within the decoder context::compute framedrop table component. This can lead to a program crash. Recommendation...

PT-2025-30865

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the md/md-bitmap module within the bitmap get stats function. The issue causes a General Protection Fault GPF when collecting statistics, specifically...

PT-2025-49785

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/amdkfd subsystem where a write lock acquired during retry fault draining is not released. This occurs because svm range restore pages calls mmap...

PT-2025-49793

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists within the kernel’s DRM/XE subsystem, specifically in the xe gem fault function, which can lead to an oops kernel panic during the execution of core hotunplug tests. This...

CVE-2024-49422

Protection Mechanism Failure in bootloader prior to SMR Oct-2024 Release 1 allows physical attackers to reset lockscreen failure count by hardware fault injection. User interaction is required for triggering this vulnerability...