Lucene search
K

7 matches found

OSV
OSV
added 2025/06/18 11:0 a.m.8 views

CVE-2022-49949 firmware_loader: Fix memory leak in firmware upload

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix memory leak in firmware upload In the case of firmware-upload, an instance of struct fwupload is allocated in firmwareuploadregister. This data needs to be freed in fwdevrelease. Create a new fwuploadfree...

5.5CVSS6AI score0.00074EPSS
Exploits0References5
NVD
NVD
added 2024/12/27 2:15 p.m.11 views

CVE-2024-53202

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix possible resource leak in fwlogfirmwareinfo The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg instance with cryptofreeshash...

5.5CVSS0.00016EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2024/12/13 12:0 a.m.13 views

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47742)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47742 advisory. - In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Mos...

7.8CVSS6.2AI score0.00015EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2024/10/21 2:42 p.m.18 views

CVE-2024-47742

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

7.8CVSS6.9AI score0.00015EPSS
Exploits0References4
OSV
OSV
added 2024/10/21 12:14 p.m.13 views

CVE-2024-47742 firmware_loader: Block path traversal

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

7.8CVSS6.3AI score0.00015EPSS
Exploits0References14
Debian CVE
Debian CVE
added 2024/10/21 12:14 p.m.10 views

CVE-2024-47742

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

7.8CVSS6.3AI score0.00015EPSS
Exploits0
OSV
OSV
added 2022/09/16 11:22 p.m.4 views

GSD-2022-1004975 firmware_loader: Fix use-after-free during unregister

firmwareloader: Fix use-after-free during unregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

7.2AI score
Exploits0
Rows per page
Query Builder