Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper access to freed memory in the ext4 file system in the ext4splitextentat function, leading to a...

The vulnerability of the axg_card_add_tdm_loopback() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the axgcardaddtdmloopback function in the sound/soc/meson/axg-card.c file of the Linux operating system’s kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the mptcp_pm_del_add_timer() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcppmdeladdtimer function in the net/mptcp/pmnetlink.c module of the Linux operating system is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the mtk_wed_setup_tc_block() function in the MediaTek network device driver for Linux operating systems allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mtkwedsetuptcblock function in the drivers/net/ethernet/mediatek/mtkwed.c file of the network device driver for MediaTek’s Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the netem_dequeue() function in the Linux kernel’s network scheduling subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the netemdequeue function in the net/sched/schnetem.c module of the Linux operating system’s network scheduling subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the fastrpcreq_mmap() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fastrpcreqmmap function in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the ila_xlat_exit_net() function in the implementation of the Identifier Locator Addressing (ILA) protocol for IPv6 in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ilaxlatexitnet function in the net/ipv6/ila/ilaxlat.c module, which implements the Internet Protocol IPv6 Identifier Locator Addressing mechanism in the Linux operating system’s kernel, is related to the reutilization of previously freed memory. Exploiting this...

CVE-2024-43701

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

The vulnerability of the nvmeevent_work() function in the Linux operating system’s NVMe driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nvme in the drivers/nvme/host/core.c file of the Linux NVMe kernel driver is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the iwlreq_fw_callback() function in the Intel Wireless WiFi Next Gen AGN driver for Linux operating systems allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iwlreqfwcallback function in the driver drivers/net/wireless/intel/iwlwifi/iwl-drv.c of the Intel Wireless WiFi Next Gen AGN Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the gfs2_glock_free() function in the gfs2 file system of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gfs2glockfree function in the fs/gfs2/glock.c file of the Linux kernel’s GFS2 file system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the mpi_ssp_completion() function in the PMC-Sierra SPC 8001 SAS/SATA kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mpisspcompletion function in the driver drivers/scsi/pm8001/pm80xxhwi.c file of the PMC-Sierra SPC 8001 SAS/SATA operating system kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2024-0124

CVE-2024-0124 affects the NVIDIA CUDA Toolkit (Windows and Linux) specifically the nvdisasm command. The flaw allows a user to cause nvdisasm to read freed memory when processing a malformed ELF file, which can lead to a limited denial of service. The available sources describe the root cause as ...

CVE-2024-0124

NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by running it on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...

NVIDIA CUDA toolkit 资源管理错误漏洞

The NVIDIA CUDA toolkit is a toolkit from NVIDIA, Inc. It provides a development environment for creating high-performance GPU-accelerated applications. A resource management error vulnerability exists in the NVIDIA CUDA toolkit. An attacker could exploit this vulnerability by running nvdisasm on...

The vulnerability of the tcf_ct_act() function in the network scheduling subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcfctact function in the net/sched/actct.c module of the net/sched/actct subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the drv_disable_wq() function in the idxd driver of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drvdisablewq function in the drivers/dma/idxd/device.c file of the idxd driver in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Py_FindObjects() function in the Python programming language library, which is open-source and part of scipy, allows a attacker to compromise the confidentiality, integrity, and accessibility of the system.

The vulnerability of the PyFindObjects function in the Python programming language library, which is open-source and part of scipy, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility ...

The vulnerability of the fcntl_setlk() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fcntlsetlk function in the fs/locks.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of Linux operating system’s AOE kernel driver, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s AOE kernel driver is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...