CVE-2023-4272

CVE-2023-4272 affects ARM Mali GPU kernel drivers (Midgard, Bifrost, Valhall families) exposing sensitive data from freed memory via local GPU processing operations. Public documents link Mali kernel-driver variants (r8p0–r32p0, r0p0–r41p0, etc.) and describe the vulnerability as local with low a...

CVE-2023-4272 Mali GPU Kernel Driver exposes sensitive data from freed memory

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

CVE-2023-4272 Mali GPU Kernel Driver exposes sensitive data from freed memory

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

kernel: Linux kernel: Denial of Service in iwlwifi due to NULL pointer dereference

A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability allows a local attacker with low privileges to cause a denial of service DoS by triggering a NULL pointer dereference. This occurs when the iwlpciprobe function fails and frees a transaction structure, but the iwlpciremove...

cups: use-after-free in cupsdAcceptClient() in scheduler/client.c

A vulnerability was found in CUPS. This issue occurs due to logging data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data immediately before the connection closed, resulting in a use-after-free in cupsdAcceptClient in scheduler/client...

Multiple Arm Products Security Vulnerabilities

ARM Midgard GPU Kernel Driver is a Mali GPU device driver from ARM UK. A security vulnerability exists in several Arm products. An attacker exploiting this vulnerability could obtain sensitive data from previously freed memory. The following products and versions are affected: Midgard GPU Kernel...

The vulnerability of the ext4_es_insert_extent() function in the fs/ext4/extents_status.c driver of the Linux file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4 file system driver in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the radix_tree_lookup() function in the lib/radix-tree.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the radixtreelookup function in the lib/radix-tree.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2023-33200

A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

CVE-2023-34970

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

CVE-2023-33200

A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

CVE-2023-34970 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

CVE-2023-34970 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

CVE-2023-4211

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory...

ARM Mali GPU Kernel Driver Resource Management Error Vulnerability

The ARM Mali GPU Kernel Driver is a driver for a graphics processor unit from ARM UK. The ARM Mali GPU Kernel Driver suffers from a resource management error vulnerability that originates from a local, unprivileged user being able to perform incorrect GPU memory handling operations to access free...

DEBIAN-CVE-2023-4813

A flaw has been identified in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with...

CVE-2023-4813

A flaw has been identified in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with...

glibc Resource Management Error Vulnerability

glibc GNU C Library is a C standard library implemented by a GNU project of the GNU community. A resource management error vulnerability exists in glibc, which stems from the fact that when an NSS module implements only the nssgethostbyname2r hooks but not the nssgethostbyname3r hooks, the...

PT-2023-8453

Name of the Vulnerable Software and Affected Versions glibc affected versions not specified Description A flaw was found in glibc, where the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements...

The vulnerability of the do_mbind() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dombind function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attacker to...