3616 matches found
UBUNTU-CVE-2021-47404
In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betopprobe Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate...
CVE-2021-47405
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free rawreport buffers in usbhidstop Free the unsent rawreport buffers when the device is removed. Fixes a memory leak reported by syzbot at: https://syzkaller.appspot.com/bug?id=7b4fa7cb1a7c2d3342a2a8a6c53371c8c418a...
CVE-2021-47404
In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betopprobe Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate...
CVE-2021-47380
In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix potential NULL pointer dereference devmaddactionorreset can suddenly invoke amdmp2pciremove at registration that will cause NULL pointer dereference since corresponding data is not initialized yet. The patch move...
UBUNTU-CVE-2021-47405
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free rawreport buffers in usbhidstop Free the unsent rawreport buffers when the device is removed. Fixes a memory leak reported by syzbot at: https://syzkaller.appspot.com/bug?id=7b4fa7cb1a7c2d3342a2a8a6c53371c8c418a...
CVE-2021-47405 HID: usbhid: free raw_report buffers in usbhid_stop
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free rawreport buffers in usbhidstop Free the unsent rawreport buffers when the device is removed. Fixes a memory leak reported by syzbot at: https://syzkaller.appspot.com/bug?id=7b4fa7cb1a7c2d3342a2a8a6c53371c8c418a...
CVE-2021-47404
In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betopprobe Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate...
CVE-2021-47405 HID: usbhid: free raw_report buffers in usbhid_stop
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free rawreport buffers in usbhidstop Free the unsent rawreport buffers when the device is removed. Fixes a memory leak reported by syzbot at: https://syzkaller.appspot.com/bug?id=7b4fa7cb1a7c2d3342a2a8a6c53371c8c418a...
CVE-2021-47404 HID: betop: fix slab-out-of-bounds Write in betop_probe
In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betopprobe Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate...
CVE-2021-47405
CVE-2021-47405 affects the Linux kernel HID usbhid subsystem. The issue is a memory leak from unsent raw_report buffers when a USB HID device is removed; a patch/fix has been released in the kernel to address this. The CVSS metrics in the initial record show a MEDIUM base score (5.5) with LOCAL a...
CVE-2021-47404 HID: betop: fix slab-out-of-bounds Write in betop_probe
In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betopprobe Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate...
CVE-2021-47404
Summary (CVE-2021-47404): The issue stems from a slab-out-of-bounds write in the HID Betop driver (betopff) in the Linux kernel. Syzbot observed a write beyond slab bounds due to assuming an input report exists; malicious devices can violate this assumption. The public advisories, including Astra...
CVE-2021-47380
The CVE-2021-47380 issue affects the Linux kernel's HID AMD SFH driver. The vulnerability arises from a potential NULL pointer dereference when devm_add_action_or_reset() is invoked during registration, because the related data isn’t initialized yet. The provided patches move data initialization ...
CVE-2021-47380 HID: amd_sfh: Fix potential NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix potential NULL pointer dereference devmaddactionorreset can suddenly invoke amdmp2pciremove at registration that will cause NULL pointer dereference since corresponding data is not initialized yet. The patch move...
CVE-2021-47380 HID: amd_sfh: Fix potential NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix potential NULL pointer dereference devmaddactionorreset can suddenly invoke amdmp2pciremove at registration that will cause NULL pointer dereference since corresponding data is not initialized yet. The patch move...
CVE-2021-47380
In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix potential NULL pointer dereference devmaddactionorreset can suddenly invoke amdmp2pciremove at registration that will cause NULL pointer dereference since corresponding data is not initialized yet. The patch move...
SUSE CVE-2024-35997
In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up The flag I2CHIDREADPENDING is used to serialize I2C operations. However, this is not necessary, because I2C core already has its own locking for that. More importantl...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a vulnerability in the HID:betop module...
CVE-2024-35997
In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up The flag I2CHIDREADPENDING is used to serialize I2C operations. However, this is not necessary, because I2C core already has its own locking for that. More importantl...
CVE-2024-35997
In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up The flag I2CHIDREADPENDING is used to serialize I2C operations. However, this is not necessary, because I2C core already has its own locking for that. More importantl...