DEBIAN-CVE-2024-49988

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...

CVE-2024-49988 ksmbd: add refcnt to ksmbd_conn struct

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...

CVE-2024-49988 ksmbd: add refcnt to ksmbd_conn struct

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a device accessing freed memory due to an injection error before stopping a queue...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper access to freed memory in the ext4 file system in the ext4splitextentat function, leading to a...

The vulnerability of the axg_card_add_tdm_loopback() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the axgcardaddtdmloopback function in the sound/soc/meson/axg-card.c file of the Linux operating system’s kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the netem_dequeue() function in the Linux kernel’s network scheduling subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the netemdequeue function in the net/sched/schnetem.c module of the Linux operating system’s network scheduling subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the mtk_wed_setup_tc_block() function in the MediaTek network device driver for Linux operating systems allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mtkwedsetuptcblock function in the drivers/net/ethernet/mediatek/mtkwed.c file of the network device driver for MediaTek’s Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the mptcp_pm_del_add_timer() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcppmdeladdtimer function in the net/mptcp/pmnetlink.c module of the Linux operating system is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the fastrpcreq_mmap() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fastrpcreqmmap function in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

xen: privcmd: Fix possible access to a freed kirqfd instance

...

The vulnerability of the ila_xlat_exit_net() function in the implementation of the Identifier Locator Addressing (ILA) protocol for IPv6 in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ilaxlatexitnet function in the net/ipv6/ila/ilaxlat.c module, which implements the Internet Protocol IPv6 Identifier Locator Addressing mechanism in the Linux operating system’s kernel, is related to the reutilization of previously freed memory. Exploiting this...

tracing: Have format file honor EVENT_FILE_FL_FREED

...

CVE-2024-43701

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

Imagination GPU DDK 安全漏洞

The Imagination GPU DDK is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU DDK 24.2 RTM1 and prior versions, which originates from software installed and run as an unprivileged user may make GPU system calls to read and write freed physical memory from the G...

The vulnerability of the iwlreq_fw_callback() function in the Intel Wireless WiFi Next Gen AGN driver for Linux operating systems allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iwlreqfwcallback function in the driver drivers/net/wireless/intel/iwlwifi/iwl-drv.c of the Intel Wireless WiFi Next Gen AGN Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the mpi_ssp_completion() function in the PMC-Sierra SPC 8001 SAS/SATA kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mpisspcompletion function in the driver drivers/scsi/pm8001/pm80xxhwi.c file of the PMC-Sierra SPC 8001 SAS/SATA operating system kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the nvmeevent_work() function in the Linux operating system’s NVMe driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nvme in the drivers/nvme/host/core.c file of the Linux NVMe kernel driver is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the gfs2_glock_free() function in the gfs2 file system of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gfs2glockfree function in the fs/gfs2/glock.c file of the Linux kernel’s GFS2 file system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

CVE-2024-0124

NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by running it on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...