A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails.

...

The vulnerability in the Linux operating system’s IEEE 1394 (FireWire) driver core allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s IEEE 1394 FireWire driver core is related to the use of previously freed memory in the function outboundPhyPacketCallback in the drivers/firewire/core-cdev.c file. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel resource management error vulnerability (CNVD-2023-51381)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux Kernel that originates from a confusion in the instructions responsible for freeing memory in driver/firewire in the...

CVE-2023-3159

A use-after-free flaw was found in driver/firewire in outboundphypacketcallback in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a use-after-free issue when the queueevent fails. Mitigation Mitigation for this issue is either not available or the currently...

DEBIAN-CVE-2023-3159

A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent fails...

CVE-2023-3159

A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent fails...

AZL-27180 CVE-2023-3159 affecting package kernel for versions less than 5.15.116.1-2

A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent fails...

CVE-2023-3159

A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent fails...

Design/Logic Flaw

A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent fails...

UBUNTU-CVE-2023-3159

A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent fails...

CVE-2023-3159

A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent fails...

CVE-2023-3159

CVE-2023-3159 is a Linux kernel use-after-free in driver/firewire outbound_phy_packet_callback. A local privileged attacker can trigger a UAF when queue_event() fails, as described in the CVE entry and corroborated by connected Astra Linux advisories. Mitigation/remediation is via the vendor/kern...

CVE-2023-3159

A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent fails...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux Kernel that originates from a confusion in the instructions responsible for freeing memory in driver/firewire in the...

CVE-2023-3159

A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent fails...

SUSE CVE-2023-3159

A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent fails...

PT-2025-53161

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the ALSA firewire-digi00x driver. Specifically, the code incorrectly handles errors during stream initialization, potentially leading to a...

K22113693: Linux kernel vulnerability CVE-2021-42739

Security Advisory Description The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avccapmt mishandles bounds checking. CVE-2021-42739 Impact There is no impact; F5 product...

SUSE CVE-2004-0658

Integer overflow in the hpsballocpacket function incorrectly reported as allochpsbpacket in IEEE 1394 Firewire driver 2.4 and 2.6 allows local users to cause a denial of service crash and possibly execute arbitrary code via the functions 1 raw1394write, 2 stateconnected, 3 handleremoterequest, or...

SUSE CVE-2016-8633

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets...