16801 matches found
PT-2024-34032
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been fixed, related to the iio: light: veml6030 driver. The issue arises from the in illuminance period available show function, where the dev...
SUSE CVE-2024-50099
In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Remove broken LDR literal uprobe support The simulateldrliteral and simulateldrswliteral functions are unsafe to use for uprobes. Both functions were originally written for use with kprobes, and access memory with...
PT-2024-35555
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.65 Description A vulnerability in the Linux kernel has been resolved. The issue is related to the introduction of support for vsock and unix sockets in sockmap, where the function tls sw has ctx tx/rx cannot...
libtiff: NULL pointer dereference in tif_dirinfo.c
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
CVE-2024-50113
In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix invalid port index for parent device In a commit 24b7f8e5cd65 "firewire: core: use helper functions for self ID sequence", the enumeration over self ID sequence was refactored with some helper functions with...
mosquitto: sending specific sequences of packets may trigger memory leak
A flaw was found in Eclipse Mosquitto. A remote attacker may be able to trigger memory leakage, segmentation fault, or a heap-use-after-free condition by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE", and "PUBLISH" packets...
CVE-2024-50118 btrfs: reject ro->rw reconfiguration if there are hard ro requirements
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject ro-rw reconfiguration if there are hard ro requirements BUG Syzbot reports the following crash: BTRFS info device loop0 state MCS: disabling free space tree BTRFS info device loop0 state MCS: clearing compat-ro...
CVE-2024-50113
In CVE-2024-50113, the Linux kernel FireWire (OHCI) core had a bug in the self-ID enumeration path that could assign an invalid port index to a parent device when multiple-port nodes were connected. The issue manifested when any extra node device with three or more ports attached to a 1394 OHCI c...
CVE-2024-50113 firewire: core: fix invalid port index for parent device
In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix invalid port index for parent device In a commit 24b7f8e5cd65 "firewire: core: use helper functions for self ID sequence", the enumeration over self ID sequence was refactored with some helper functions with...
libtiff: NULL pointer dereference in tif_dirinfo.c
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
kernel: nouveau: lock the client object tree.
A flaw was found in the nouveau module in the Linux kernel. A missing resource lock can cause a race condition and trigger a general protection fault, resulting in a denial of service...
kernel: KVM: Always flush async #PF workqueue when vCPU is being destroyed
A flaw was found in the KVM Kernel-based Virtual Machine subsystem in the Linux kernel. When virtual processors or virtual machines are destroyed, pending asynchronous page fault background tasks are not properly completed before resources are released. A local user with permissions to manage...
kernel: KVM: Always flush async #PF workqueue when vCPU is being destroyed
A flaw was found in the KVM Kernel-based Virtual Machine subsystem in the Linux kernel. When virtual processors or virtual machines are destroyed, pending asynchronous page fault background tasks are not properly completed before resources are released. A local user with permissions to manage...
OSV-2024-1274 Segv on unknown address in yara_yyparse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515523 Crash type: Segv on unknown address Crash state: yarayyparse yrlexparserulesfile cliloadyara...
OSV-2024-1272 Segv on unknown address in std::__1::ios_base::~ios_base
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371292576 Crash type: Segv on unknown address Crash state: std::1::iosbase::iosbase Poco::Net::MultipartReader::nextPart Poco::Net::MailMessage::readMultipart...
PT-2024-40624
Name of the Vulnerable Software and Affected Versions: Poco Net affected versions not specified Description: The issue is related to a crash that occurs due to a segmentation fault on an unknown address. The crash involves the std:: 1::ios base destructor and the...
PT-2024-40625 · Git +1 · Clamav
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash state includes functions such as yara yyparse, yr lex...
PT-2024-40627 · Git +1 · Mruby
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Segv on an unknown address. The crash state involves several functions: udiv, mpz mdiv, and mrb bint div. No...
CVE-2024-50113: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix invalid port index for parent device In a commit 24b7f8e5cd65 "firewire: core: use helper functions for self ID sequence", the enumeration over self ID sequence was refactored with some helper functions with...
PT-2024-35534
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.8 Description A fault in the Linux kernel has been resolved, specifically in the dwc3 component, which occurs when the system is suspended and the device was already runtime suspended. This issue prevents...