1635 matches found
CVE-2023-3889 Mali GPU Kernel Driver exposes sensitive data from freed memory
A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory...
CVE-2023-4272 Mali GPU Kernel Driver exposes sensitive data from freed memory
A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...
CVE-2023-4272 Mali GPU Kernel Driver exposes sensitive data from freed memory
A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...
CVE-2023-4272
CVE-2023-4272 affects ARM Mali GPU kernel drivers (Midgard, Bifrost, Valhall families) exposing sensitive data from freed memory via local GPU processing operations. Public documents link Mali kernel-driver variants (r8p0–r32p0, r0p0–r41p0, etc.) and describe the vulnerability as local with low a...
kernel: platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2()
A memory leak was found in the AMD PMC driver's STB debugfs interface. When amdpmcsendcmd fails, the allocated buffer is not freed, causing memory to leak on each failed operation...
kernel: Linux kernel: Denial of Service in iwlwifi due to NULL pointer dereference
A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability allows a local attacker with low privileges to cause a denial of service DoS by triggering a NULL pointer dereference. This occurs when the iwlpciprobe function fails and frees a transaction structure, but the iwlpciremove...
cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
A vulnerability was found in CUPS. This issue occurs due to logging data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data immediately before the connection closed, resulting in a use-after-free in cupsdAcceptClient in scheduler/client...
Multiple Arm Products Security Vulnerabilities
ARM Midgard GPU Kernel Driver is a Mali GPU device driver from ARM UK. A security vulnerability exists in several Arm products. An attacker exploiting this vulnerability could obtain sensitive data from previously freed memory. The following products and versions are affected: Midgard GPU Kernel...
DEBIAN-CVE-2023-1192
A use-after-free flaw was found in smb2isstatusiotimeout in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region,...
DEBIAN-CVE-2023-1193
A use-after-free flaw was found in setupasyncwork in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work...
PT-2023-9775
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to a use-after-free bug in the Linux kernel's tracing component. It occurs when a kprobe event is deleted while its associated file is still open, causing a...
The vulnerability of the ext4_es_insert_extent() function in the fs/ext4/extents_status.c driver of the Linux file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ext4 file system driver in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the radix_tree_lookup() function in the lib/radix-tree.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the radixtreelookup function in the lib/radix-tree.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
CVE-2023-34970
A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...
CVE-2023-33200
A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...
CVE-2023-33200
A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...
CVE-2023-34970 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...
CVE-2023-34970 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...
AZL-31730 CVE-2023-5345 affecting package hyperv-daemons for versions less than 5.15.135.1-1
A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3fscontextparseparam, ctx-password was freed but the field was not set to NULL which could lead to double free. We recommend upgrading pas...