Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 5.15.111 through 5.16, 6.1.28 through 6.2, 6.2.15 through 6.3, 6.3.2 through 6.4, and 6.4. These vulnerabilities stem from the function mtdotpnvmemadd, which does not clear mtd-otpusernvmem after a user’s OTP NVMEM device is canceled,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.36 has a security vulnerability. This vulnerability arises from the fact that the session timer is not stopped when a RX BA session is terminated. As a result, the timer may continue to queue on the released tidrx, and the expiration handler can re-activate the timer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities arise from the Bluetooth mgmt mechanism, which fails to remove queued meshsendsync entries when transmission is canceled. As a result, the meshtx pointer, which has been released, may be reused in subsequent...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 has a security vulnerability. This vulnerability stems from the threaded IRQ handler in the gp2ap020a00f driver, which queues data-work through the irqworkqueue. However, the freeirq function does not refresh the queued irwork, resulting in the work continuing to run...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.5 has a security vulnerability. This vulnerability arises from a failure in power management settings, where the probe function does not unregister the registered iiodevice when it fails, resulting in the device being released, but the sysfs/chardev nodes still pointing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the use of flowoffloadworkdel, which releases NFFLOWHWDEAD before the work thread has cleared NFFLOWHWPENDING. This concurrent garbage collection may cause the flow to be released prematurely, leading t...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.2 contains a security vulnerability. This vulnerability arises from the premature release of backreferences when associating with non-transmission MBSSID configuration files. Subsequently, the same element pointers are still used to determine the working channel,...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from vcswrite, which does not reload the vc pointer when the failed copying path is encountered. As a result, vcsnotifier reads memory that has been released, potentially leading to reuse of the released memory after it has...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.4 contains a security vulnerability. This vulnerability arises from the fact that the cdns3gadgetexit function does not wait for the pendingstatuswq and alignedbufwq tasks to complete before releasing the endpoints and buffers. This may lead to reuse after release...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 6.12.112 to 6.13, 6.18.55 to 6.19, and 7.0. These vulnerabilities stem from the function bpfmasetdtor, which copies map-record but does not maintain the BTF reference within the destructor context. As a result, the working queue still...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from improper order of assigning values to the batch status and hash pointer during the adjustment ofutex private hashing, which may lead to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains a security vulnerability. This vulnerability arises from the use of tbdpdprxwork, which checks the dprx Canceled flag before acquiring tb-lock. As a result, running tasks cannot be canceled, leading to the polling of the DPRX capability for the removed DP...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the USB cdc-acm driver not checking the disconnection status when ports are closed. As a result, the control URB and read URB are still re-submitted. This causes a competition with the concurrent disconnection process,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.13 contains security vulnerabilities. These vulnerabilities arise from a race condition that occurs when canceling requests for the lightning control channel. This race condition causes the tbcfgrequestwork and tbcfgrequest Cancel functions to compete, resulting in the...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the improper closure of the IOC timer during the removal process. The iocpftimer and semtimer are reloaded into each other. This can lead to calls being made after the freenetdev function releases the struct bnad,...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 5.10.200 through 5.11, and 5.12, have security vulnerabilities. These vulnerabilities arise from the unmasking process for canceling the ZYNQ XADC alarm IRQ without first releasing the IRQ after unbinding. As a result, the processing program may re-queue and run its task...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities arise from the fact that work items are not disabled before termination. As a result, notification callback functions access a linker array that has already been released, or duplicate instances are registered,...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel from 6.18.34 to 6.18.56, as well as 7.0.11 to 7.1 and 7.1 itself, have security vulnerabilities. These vulnerabilities stem from the fprobe processing program executing when RCU does not monitor it. The standard RCU grace period does not wait for these executions, and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains a security vulnerability. This vulnerability arises from accountmmsched, which improperly manages reference counts when accessing the cache group through the task that is being switched with memory descriptors. This can lead to reuse after deallocation...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.17 contains a security vulnerability. This vulnerability arises when mac80211 replaces a chanctx on the spot. In this case, the old chanctx is released prematurely while still pointing to it. As a result, subsequent operations such as canceling reservations and switchin...