Lucene search
+L

267 matches found

Positive Technologies
Positive Technologies
•added 2024/08/21 12:00 a.m.•13 views

PT-2024-40566 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as chunk free object and stream dct finalize. No informatio...

7AI score
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/08/08 2:20 a.m.•12 views

SUSE CVE-2024-42249

In the Linux kernel, the following vulnerability has been resolved: spi: don't unoptimize message in spiasync Calling spimaybeunoptimizemessage in spiasync is wrong because the message is likely to be in the queue and not transferred yet. This can corrupt the message while it is being used by the...

7.8CVSS6.5AI score0.00192EPSS
SaveExploits0References3
OSV
OSV
•added 2024/08/07 4:15 p.m.•65 views

UBUNTU-CVE-2024-42249

In the Linux kernel, the following vulnerability has been resolved: spi: don't unoptimize message in spiasync Calling spimaybeunoptimizemessage in spiasync is wrong because the message is likely to be in the queue and not transferred yet. This can corrupt the message while it is being used by the...

7.8CVSS5.7AI score0.00192EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/05/28 12:00 a.m.•21 views

PT-2024-32717

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the crypto: stm32/cryp module. The finalize operation in interrupt mode produces a spinlock recursion warning because BH...

9.8CVSS5.4AI score0.00469EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/05/22 12:00 a.m.•17 views

PT-2024-40781 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as chunk free object and stream dct finalize. No...

7AI score
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/05/21 2:00 a.m.•12 views

SUSE CVE-2024-35792

In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request...

7.8CVSS6.8AI score0.00225EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/05/17 10:23 p.m.•42 views

CVE-2024-35792

A vulnerability was found in the Linux kernel's rockchip rk3288cryptoahash.c driver in the rkhashrun function, where a use-after-free scenario can occur. This flaw is caused by improper function call ordering, where rkhashunprepare is called after cryptofinalizehashrequest. This may free some of...

5.5CVSS6.5AI score0.00225EPSS
SaveExploits0References4
NVD
NVD
•added 2024/05/17 1:15 p.m.•32 views

CVE-2024-35792

In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request...

7.8CVSS6.7AI score0.00225EPSS
SaveExploits0References3
OSV
OSV
•added 2024/05/17 1:15 p.m.•9 views

DEBIAN-CVE-2024-35792

In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request...

7.8CVSS5.6AI score0.00225EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/17 1:15 p.m.•14 views

UBUNTU-CVE-2024-35792

In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request...

7.8CVSS5.7AI score0.00225EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2024/05/17 1:15 p.m.•29 views

CVE-2024-35792

In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request...

7.8CVSS6.3AI score0.00225EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/05/17 12:24 p.m.•30 views

CVE-2024-35792 crypto: rk3288 - Fix use after free in unprepare

In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request...

7.8CVSS7AI score0.00225EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/05/17 12:24 p.m.•55 views

CVE-2024-35792 crypto: rk3288 - Fix use after free in unprepare

In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request...

7.8CVSS6.6AI score0.00225EPSS
SaveExploits0References3
CVE
CVE
•added 2024/05/17 12:24 p.m.•109 views

CVE-2024-35792

CVE-2024-35792 refers to a Linux kernel issue in the crypto/rk3288 path where a use-after-free could occur due to an incorrect call order. The description in the connected documents states: the unprepare call must be carried out before the finalize call, as the finalize can free the request. The ...

7.8CVSS6.9AI score0.00225EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/05/17 12:24 p.m.•30 views

CVE-2024-35792 crypto: rk3288 - Fix use after free in unprepare

In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request...

7.8CVSS5.9AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•2 views

CVE-2024-35792: Use After Free

In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request...

7.8CVSS6.2AI score0.00225EPSS
SaveExploits0References8
OSV
OSV
•added 2024/05/01 1:15 p.m.•24 views

UBUNTU-CVE-2024-27061

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Fix use after free in unprepare sun8icecipherunprepare should be called before cryptofinalizeskcipherrequest, because client callbacks may immediately free memory, that isn't needed anymore. But it will be used...

7.8CVSS5.7AI score0.00228EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/04/30 9:57 a.m.•25 views

kernel: drm/amdgpu: fix calltrace warning in amddrm_buddy_fini

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix calltrace warning in amddrmbuddyfini The following call trace is observed when removing the amdgpu driver, which is caused by that BOs allocated for psp are not freed until removing. 61811.450562 RIP:...

5.5CVSS6.8AI score0.00157EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/04/24 12:00 a.m.•2 views

PT-2024-40706

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state includes functions such as ngx device forward finalize, ngx...

5.8AI score
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/04/20 2:08 a.m.•10 views

SUSE CVE-2024-26877

In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call finalize with bh disabled When calling cryptofinalizerequest, BH should be disabled to avoid triggering the following calltrace: ------------ cut here ------------ WARNING: CPU: 2 PID: 74 at...

3.3CVSS6.3AI score0.0073EPSS
SaveExploits0References8
Rows per page
Query Builder