PT-2024-29244

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, where references to freed memory in the ASoC topology module are incorrect. Most users release memory used by a topology file after parsing it,...

The vulnerability of the check_kprobe_address_safe() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the checkkprobeaddresssafe function in the kernel/kprobes.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the is_valid_oplock_break() function in the client implementation of the SMB protocol in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the isvalidoplockbreak function in the fs/smb/client/misc.c module of the SMB client implementation in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a system crash when an incorrect pointer is allocated from automatically freed memory...

The vulnerability of the cifs_signal_cifsd_for_reconnect() function in the Linux kernel’s SMB client implementation allows a hacker to cause a service failure.

The vulnerability of the cifssignalcifsdforreconnect function in the fs/smb/client/connect.c module of the SMB protocol client implementation in Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerability of the smb2_reconnect_server() function in the Linux kernel-based SMB protocol client implementation allows a hacker to cause a service failure.

The vulnerability of the smb2reconnectserver function in the fs/smb/client/smb2pdu.c module of the SMB protocol client implementation in Linux operating systems is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the rk_hash_run() function in the Rockchip kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rkhashrun function in the drivers/crypto/rockchip/rk3288cryptoahash.c file of the Rockchip cryptographic driver for the Linux operating system is related to the re-use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the sev_mem_enc_register_region() function in the Linux operating system’s KVM kernel component, which allows a hacker to cause a service failure

The vulnerability of the sevmemencregisterregion function in the arch/x86/kvm/svm/sev.c module of the Linux kernel’s KVM component is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CLSA-2024-1716981167 Fix of 17 CVEs

CVE-url: https://ubuntu.com/security/CVE-2022-48673 - net/smc: Fix possible access to freed memory in link clear CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client:...

F5 Nginx 安全漏洞

NGINX is an HTTP and reverse proxy server, email proxy server and general purpose TCP/UDP proxy server. An information disclosure vulnerability exists in F5 NGINX Plus and NGINX Open Source, which can be exploited by an unauthenticated, remote attacker to gain access to previously freed memory...

The vulnerability of the PuTTY encryption protection mechanism, related to the access to free memory cells, allows a hacker to cause a service failure.

The vulnerability of the PuTTY encryption method is related to the access to cells in the freed memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service disconnection using the SSH1MSGDISCONNECT message...

PT-2024-27287 · Lighttpd · Lighttpd

Name of the Vulnerable Software and Affected Versions: lighttpd versions prior to 1.4.51 Description: A condition exists whereby a remote attacker can craft an http request which could result in multiple outcomes: 1. cause lighttpd to access freed memory in which case the process lighttpd is...

The vulnerability of the sco_sock_timeout() function in the Linux kernel’s Bluetooth subsystem allows a hacker to trigger a service failure.

The vulnerability of the scosocktimeout function in the net/bluetooth/sco.c module of the Linux kernel’s Bluetooth subsystem is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a attacker to cause service...

The vulnerability of the amdgpu_hmm_register() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c driver for the amdgpu core of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the amdgpuhmmregister function in the drivers/gpu/drm/amd/amdgpu/amdgpuhmm.c file of the amdgpu kernel in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mctp_sk_unhash() function in the net/mctp/af_mctp.c module, which is part of the MCTP protocol implementation in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mctpskunhash function in the net/mctp/afmctp.c module, which is part of the MCTP protocol implementation in the Linux operating system, is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the gtp_init() function in the drivers/net/gtp.c module of the GPRS protocol implementation in Linux’s kernel allows a hacker to cause a service failure.

The vulnerability of the gtpinit function in the drivers/net/gtp.c module of the GPRS protocol implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a attacker to cause service interruptions...

The vulnerability of the nfs_direct_commit_schedule() function in the fs/nfs/direct.c module of the Linux kernel’s Network File System (NFS) allows a attacker to cause a service failure.

The vulnerability of the nfsdirectcommitschedule function in the fs/nfs/direct.c module of the Linux kernel’s Network File System NFS module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cdns3_gadget_ep_disable() function in the drivers/usb/cdns3/cdns3-gadget.c driver for the USB Cadence kernel of the Linux operating system allows a hacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the cdns3gadgetepdisable function in the drivers/usb/cdns3/cdns3-gadget.c driver of the Linux operating system’s USB driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

The vulnerability of the lpfc_mbx_cmpl_fc_reg_login() function in the drivers/scsi/lpfc/lpfc_hbadisc.c file of the Linux kernel allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lpfcmbxcmplfcreglogin function in the drivers/scsi/lpfc/lpfchbadisc.c file of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the sun8i-ce_cipher_do_one() function in the drivers/crypto/allwinner/sun8i-ce/sun8i-ce-cipher.c file of the Allwinner Crypto Engine driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sun8icecipherdoone function in the drivers/crypto/allwinner/sun8i-ce/sun8i-ce-cipher.c file of the Allwinner Crypto Engine driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker...