5594 matches found
UBUNTU-CVE-2022-49317
In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid infinite loop to flush node pages xfstests/generic/475 can give EIO all the time which give an infinite loop to flush node page like below. Let's avoid it. 16418.518551 Call Trace: 16418.518553 ? dmsubmitbio+0x48/0x40...
CVE-2022-49705
In the Linux kernel, the following vulnerability has been resolved: 9p: fix fid refcount leak in v9fsvfsatomicopendotl We need to release directory fid if we fail halfway through open This fixes fid leaking with xfstests generic 531...
CVE-2022-49614
This CVE entry documents a Linux kernel vulnerability in the nvme subsystem (CVE-2022-49614) where the root cause involves using a struct group for generic command dwords. The consequence described is that this could let a trace event know the full size of data intended to be copied and could sil...
CVE-2022-49295 nbd: call genl_unregister_family() first in nbd_cleanup()
In the Linux kernel, the following vulnerability has been resolved: nbd: call genlunregisterfamily first in nbdcleanup Otherwise there may be race between module removal and the handling of netlink command, which can lead to the oops as shown below: BUG: kernel NULL pointer dereference, address:...
CVE-2025-0235
Out-of-bounds vulnerability due to improper memory release during image rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic LIPSLX V4 Printer Driver...
CVE-2022-49210 MIPS: pgalloc: fix memory leak caused by pgd_free()
In the Linux kernel, the following vulnerability has been resolved: MIPS: pgalloc: fix memory leak caused by pgdfree pgd page is freed by generic implementation pgdfree since commit f9cb654cb550 "asm-generic: pgalloc: provide generic pgdfree", however, there are scenarios that the system uses mor...
CVE-2025-0234
Out-of-bounds vulnerability in curve segmentation processing of Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic LIPSLX V4 Printer Driver...
CVE-2025-0234
CVE-2025-0234 affects Canon Generic PCL6 V4 Printer Driver, Generic UFR II V4 Printer Driver, and Generic LIPSLX V4 Printer Driver. The root cause is an out-of-bounds vulnerability in curve segmentation processing, leading to Denial of Service (DoS); some conditions could enable arbitrary code ex...
PT-2025-8229 · Unknown · Generic Ufr Ii V4 Printer Driver +2
Name of the Vulnerable Software and Affected Versions: Generic PCL6 V4 Printer Driver affected versions not specified Generic UFR II V4 Printer Driver affected versions not specified Generic LIPSLX V4 Printer Driver affected versions not specified Description: The issue is related to an...
Canon多款产品 缓冲区错误漏洞
Canon Generic PCL6 V4 Printer Driver and others are products of Canon Japan.Canon Generic PCL6 V4 Printer Driver is a Canon Generic PCL6 V4 printer driver.Canon Generic UFR II V4 Printer Canon Generic UFR II V4 Printer Driver is a Canon Generic UFR II V4 printer driver.Canon Generic LIPSLX V4...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from gic-v3 not properly handling node reference counting when populating PPI partitions, which could lead to a...
The vulnerability of the lib/generic-radix-tree.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the lib/generic-radix-tree.c component in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the nilfs2 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure
The vulnerability of the lib/generic-radix-tree.c component in the Linux operating system’s kernel is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...
SUSE CVE-2023-38060
Improper Input Validation vulnerability in the ContentType parameter for attachments on TicketCreate or TicketUpdate operations of the OTRS Generic Interface modules allows any authenticated attacker to to perform an host header injection for the ContentType header of the attachment. This issue...
The vulnerabilities of the Generic Data Mapper, Engineering Adapter, and Engineering Interface modules of the software for designing, operating, and maintaining technological installations like COMOS, allow attackers to execute XXE attacks.
The vulnerability of the Generic Data Mapper, Engineering Adapter, and Engineering Interface modules of the COMOS software for designing, operating, and maintaining technological installations is related to a bug that restricts XML references to external objects. Exploiting this vulnerability cou...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: nsh: Added skb-protocol, data, macheader to the outer header in nshgsosegment. The syzbot triggered various errors by using a crafted GSO packet in VIRTIONETHDRGSOUDP, which layered the following protocols: ETHP8021AD + ETHPNS...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net: added more sanity checks to qdiscpktleninit. One of the approaches handles SKBGSODODGY, assuming that skb-len is greater than hdrlen. The function virtionethdrtoskb does not fully dissect TCP headers; it only ensures that th...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: net: Avoid potential underflow in qdiscpktleninit with UFO After committing 7c6d2ecbda83 “net: Be more gentle about silly GSO requests coming from user”, the virtionethdrtoskb function added sanity checks to detect malicious...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: “fou”: removed the warning in guegroreceive for unsupported protocols. The warning for guegroreceive is removed if the encapsulated type is unknown or does not have a GRO handler. Such packets can be easily constructed. The Syzbo...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: net: Missing check for virtio Two missing checks in virtionethdrtoskb allowed syzbot to crash kernels again. 1. After the skbsegment function, the buffer may become non-linear nrfrags != 0. However, since the SKBTXSHAREDFRAG...