Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a system crash when an incorrect pointer is allocated from automatically freed memory...

CLSA-2024-1716981167 Fix of 17 CVEs

CVE-url: https://ubuntu.com/security/CVE-2022-48673 - net/smc: Fix possible access to freed memory in link clear CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client:...

F5 Nginx 安全漏洞

NGINX is an HTTP and reverse proxy server, email proxy server and general purpose TCP/UDP proxy server. An information disclosure vulnerability exists in F5 NGINX Plus and NGINX Open Source, which can be exploited by an unauthenticated, remote attacker to gain access to previously freed memory...

The vulnerability of the PuTTY encryption protection mechanism, related to the access to free memory cells, allows a hacker to cause a service failure.

The vulnerability of the PuTTY encryption method is related to the access to cells in the freed memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service disconnection using the SSH1MSGDISCONNECT message...

PT-2024-27287 · Lighttpd · Lighttpd

Name of the Vulnerable Software and Affected Versions: lighttpd versions prior to 1.4.51 Description: A condition exists whereby a remote attacker can craft an http request which could result in multiple outcomes: 1. cause lighttpd to access freed memory in which case the process lighttpd is...

The vulnerability of the sco_sock_timeout() function in the Linux kernel’s Bluetooth subsystem allows a hacker to trigger a service failure.

The vulnerability of the scosocktimeout function in the net/bluetooth/sco.c module of the Linux kernel’s Bluetooth subsystem is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a attacker to cause service...

The vulnerability of the amdgpu_hmm_register() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c driver for the amdgpu core of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the amdgpuhmmregister function in the drivers/gpu/drm/amd/amdgpu/amdgpuhmm.c file of the amdgpu kernel in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mctp_sk_unhash() function in the net/mctp/af_mctp.c module, which is part of the MCTP protocol implementation in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mctpskunhash function in the net/mctp/afmctp.c module, which is part of the MCTP protocol implementation in the Linux operating system, is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the cdns3_gadget_ep_disable() function in the drivers/usb/cdns3/cdns3-gadget.c driver for the USB Cadence kernel of the Linux operating system allows a hacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the cdns3gadgetepdisable function in the drivers/usb/cdns3/cdns3-gadget.c driver of the Linux operating system’s USB driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

The vulnerability of the lpfc_mbx_cmpl_fc_reg_login() function in the drivers/scsi/lpfc/lpfc_hbadisc.c file of the Linux kernel allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lpfcmbxcmplfcreglogin function in the drivers/scsi/lpfc/lpfchbadisc.c file of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the nfs_direct_commit_schedule() function in the fs/nfs/direct.c module of the Linux kernel’s Network File System (NFS) allows a attacker to cause a service failure.

The vulnerability of the nfsdirectcommitschedule function in the fs/nfs/direct.c module of the Linux kernel’s Network File System NFS module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gtp_init() function in the drivers/net/gtp.c module of the GPRS protocol implementation in Linux’s kernel allows a hacker to cause a service failure.

The vulnerability of the gtpinit function in the drivers/net/gtp.c module of the GPRS protocol implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a attacker to cause service interruptions...

The vulnerability of the sun8i-ce_cipher_do_one() function in the drivers/crypto/allwinner/sun8i-ce/sun8i-ce-cipher.c file of the Allwinner Crypto Engine driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sun8icecipherdoone function in the drivers/crypto/allwinner/sun8i-ce/sun8i-ce-cipher.c file of the Allwinner Crypto Engine driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker...

The vulnerability of the devlink_init() function in the net/devlink/core.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the devlinkinit function in the net/devlink/core.c module of the Linux kernel is related to the re-use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hci_error_reset() function in the net/bluetooth/hci_core.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hcierrorreset function in the net/bluetooth/hcicore.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the mt792x_irq_handler() function in the drivers/net/wireless/mediatek/mt76/mt792x_dma.c file of the mediatek kernel driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mt792xirqhandler function in the mediatek driver’s drivers/net/wireless/mediatek/mt76/mt792xdma.c file is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the cifsdebug_files_proc_show() function in the fs/smb/client/cifsdebug.c module of the SMB subsystem in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cifsdebugfilesprocshow function in the fs/smb/client/cifsdebug.c module of the SMB subsystem of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the wilc_netdev_cleanup() function in the drivers/net/wireless/microchip/wilc1000/netdev.c driver of the Atmel WILC1000 Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wilcnetdevcleanup function in the drivers/net/wireless/microchip/wilc1000/netdev.c file of the Atmel WILC1000 Linux kernel driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __i915_vma_active() function in the drivers/gpu/drm/i915/i915_vma.c file of the Intel graphics adapter driver for Linux-based systems can be exploited by attackers to cause service interruptions.

The vulnerability of the i915vmaactive function in the drivers/gpu/drm/i915/i915vma.c file of the Intel 8xx/9xx/G3x/G4x/HD graphics controller driver for the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this...

DEBIAN-CVE-2022-48673

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifying the QP to the Error state, all RX WR would be completed with WC in IBWCWRFLUSHERR status. Current implementation does not wait for it is done, but destroy...