kernel: drm/i915: Fix memory leaks in i915 selftests

A memory leak flaw was found in the Linux kernel's Intel i915 graphics driver in the selftest page allocation logic. A local user can trigger this issue when running i915 selftests and the fakegetpages function encounters errors, causing the function to return without freeing previously allocated...

kernel: blocking operation in dvb_frontend_get_event and wait_event_interruptible

A potential deadlock flaw was found in the Linux’s kernel DVB API used by Digital TV devices functionality. This flaw allows a local user to crash the system...

The vulnerability of the pex64_bfd_print_pdata_section function in the bfd/libbfd.c component, and the pex64_get_runtime_function function in the pei-x86_64.c component of the GNU Binutils development environment, allows a attacker to cause a service failure.

The vulnerability of the pex64bfdprintpdatasection function in the bfd/libbfd.c component, and the pex64getruntimefunction function in the pei-x8664.c component of the GNU Binutils development environment, relates to reading data from within acceptable buffer limits. Exploitation of this...

The vulnerability in the get_data function of the binutils/nm.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the getdata function in the binutils/nm.c component of the GNU Binutils development environment is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause a service failure...

CLSA-2023-1699907659 Fix CVE(s): CVE-2023-32360

SECURITY UPDATE: An unauthenticated user may be able to access recently printed documents. The config file /etc/cups/cupsd.conf should be edited manually in case the cups has been already installed in the system: the and sections should be changed according to the patch. -...

CLSA-2023-1699907536 Fix CVE(s): CVE-2023-32360

SECURITY UPDATE: An unauthenticated user may be able to access recently printed documents. The config file /etc/cups/cupsd.conf should be edited manually in case the cups has been already installed in the system: the and sections should be changed according to the patch -...

PT-2023-35581 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash occurred in the pcpp::SSLClientHelloMessage::getCipherSuite function, as reported by OSS-Fuzz. The crash was triggere...

The vulnerability of the get_register function in the Vim text editor allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the getregister function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability in the get_token function of the pnm2png.c component from the PNG bitmap library allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the gettoken function in the pnm2png.c component of the PNG bitmap handling library involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

PT-2023-35568 · Git +1 · Lcms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to an unknown read issue. The crash involves the function cmsIT8GetDataRowColDbl and is related to the file cms cgats fuzzer.c. ...

The vulnerability of the aper.GetBitString function in the NGAP Message Handler component of the software for fifth-generation mobile communication networks (5G), free5GC, allows a attacker to cause a service failure.

The vulnerability of the aper.GetBitString function in the NGAP Message Handler component of the 5G mobile communication network management software free5GC is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2023-30180 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 23.11.0 Description: The issue concerns the login method in LibreNMS, which lacks a rate limit, allowing an attacker to potentially gain access to user accounts through brute force attacks. The login method uses a G...

CVE-2023-46001

Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src/isomedia/isomread.c:2807:51 function in gfisomgetuserdata...

CVE-2023-33481

RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php...

kernel: mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak

In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pmruntimeresumeandget to prevent refcnt leak In arizonaclk32kenable, we should use pmruntimeresumeandget as pmruntimegetsync will increase the refcnt even when it returns an error...

kernel: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()

A vulnerability was found in the Linux kernel's ALSA subsystem in the addsecretdacpath function, where improper array handling can lead to out-of-bounds access. This occurs if the return value of the call to sndhdagetconnections returns an error code a negative number, which is stored in the...

kernel: thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash

A null pointer dereference flaw was found in the Linux kernel thermal/intelpowerclamp driver. When CPU 0 is offline and the intelpowerclamp driver attempts to inject idle cycles, the code incorrectly calls smpprocessorid preemptively, which triggers a kernel BUG. This occurs because the function...

kernel: regulator: of: Fix refcount leak bug in of_get_regulation_constraints()

In the Linux kernel, the following vulnerability has been resolved: regulator: of: Fix refcount leak bug in ofgetregulationconstraints We should call the ofnodeput for the reference returned by ofgetchildbyname which has increased the refcount...

kernel: mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()

In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix swapinfostruct race between swapoff and getswappages The si-lock must be held when deleting the si from the available list. Otherwise, another thread can re-add the si to the available list, which can lead to memory...

kernel: mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2()

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: Fix PCI device refcount leak in mt7915pciinithif2 As comment of pcigetdevice says, it returns a pcidevice with its refcount increased. We need to call pcidevput to decrease the refcount. Save the return value of...