645 matches found
ROS-20260112-7302
A vulnerability in the gsmcleanupmux function of the Linux kernel NGSM driver is related to the reuse of previously freed memory due to competitive access to a resource "Race Situation". Exploitation of the vulnerability may allow an attacker to escalate his privileges...
CVE-2023-53805
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2023-53805 tty: n_gsm: fix UAF in gsm_cleanup_mux
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix UAF in gsmcleanupmux In gsmcleanupmux the 'gsm-dlci' pointer was not cleaned properly, leaving it a dangling pointer after gsmdlcirelease. This leads to use-after-free where 'gsm-dlci0' are freed and accessed by th...
CVE-2023-53805
Removed by vendor...
EUVD-2023-60101
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Exploit for Out-of-bounds Read in Openssl
--- Cybersecurity Labs Portfolio This repository contain...
tty: n_gsm: Don't block input queue by waiting MSC
...
AZL-68942 CVE-2025-40071 affecting package kernel for versions less than 6.6.112.1-2
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...
CVE-2025-40071
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...
UBUNTU-CVE-2025-40071
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...
CVE-2025-40071
CVE-2025-40071 pertains to the Linux kernel tty n_gsm handling. The issue arises when opening a DLC channel: gsm_queue() processes frames and invokes gsm_dlci_open() → gsm_modem_update(). In basic encoding, gsm_modem_upd_via_msc() could block the input queue waiting for a Modem Status Command (MS...
EUVD-2025-36457
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...
CVE-2025-40071 tty: n_gsm: Don't block input queue by waiting MSC
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the gsmmodemupdviamsc function potentially blocking the input queue when processing basic mode, which could...
CVE-2021-22291
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2...
CVE-2021-22291 EIBPORT Reflected XSS
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2...
CVE-2021-22291
ABB EIBPORT V3 KNX and ABB EIBPORT V3 KNX GSM are affected by a reflected XSS due to improper input neutralization during web page generation. Affects versions prior to 3.9.2 for V3 KNX and prior to 3.9.2 for V3 KNX GSM. The vulnerability could allow attackers to execute scripts in the user’s bro...
CVE-2021-22291 EIBPORT Reflected XSS
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2...