16851 matches found
CVE-2024-42259
The CVE-2024-42259 issue affects the Linux kernel DRM/i915 gem memory mapper. The root cause was a miscalculation of the mapped region size when a partial mapping offset is involved, which could permit a page fault on access. The fix changes how the mapping boundaries are computed: the start and ...
CVE-2024-42259 drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mapped area as the lesser value between the requested size and the actual size does not consider the partial mapping offset. This can cau...
CVE-2024-7515: Improper Input Validation
CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller...
CVE-2024-42259: Incorrect Calculation of Buffer Size
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mapped area as the lesser value between the requested size and the actual size does not consider the partial mapping offset. This can cau...
PT-2024-19900 · Intel · Intel Ethernet Network Controllers/Adapters E810 Series
Name of the Vulnerable Software and Affected Versions: Linux kernel mode driver for IntelR Ethernet Network Controllers and Adapters E810 Series versions prior to 28.3 Description: The issue is related to a protection mechanism failure in the Linux kernel mode driver, which may allow an...
CVE-2024-7507: Improper Input Validation
CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is received, causing a fault in the controller...
rtpproxy:fuzz_rtp_session: Segv on unknown address in rtpp_refcnt_decref
Project: https://github.com/sippy/rtpproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=4736132766564352 Project: rtpproxy Fuzzing Engine: honggfuzz Fuzz Target: fuzzrtpsession Job Type: honggfuzzasanrtpproxy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...
SUSE CVE-2024-43167
DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...
AMD Secure Processor and AMD Secure Encrypted Virtualization security vulnerabilities
AMD Secure Encrypted Virtualization and AMD Secure Processor ASP are both products of Ultraviolet Semiconductor AMD, Inc.AMD Secure Encrypted Virtualization is a software application. Hardware-accelerated memory encryption to protect data in use.AMD Secure Processor is a standalone ARM Coretex-A5...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread one which called recvmsg/sendmsg may exit as soon as the async crypto handler calls complete so any code past that point risks touching...
CVE-2024-7006
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
CVE-2024-43167
DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...
DEBIAN-CVE-2024-43167
DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...
UBUNTU-CVE-2024-7006
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
CVE-2024-43167: NULL Pointer Dereference
DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...
CVE-2024-7006: NULL Pointer Dereference
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
PT-2024-31356
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The MANA driver's RX buffer alloc size is passed into napi build skb to create SKB. The size needs to be aligned properly for better performance and atomic operations. Otherwise, on ARM6...
CVE-2024-7006 Libtiff: null pointer dereference in tif_dirinfo.c
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
CVE-2024-7006
A null pointer dereference flaw was found in Libtiff via "tifdirinfo.c". This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
CVE-2024-7006 Libtiff: null pointer dereference in tif_dirinfo.c
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...