7 matches found
CVE-2026-53036
A flaw was found in the Linux kernel. Specifically, an off-by-one error exists in the BPF Berkeley Packet Filter JIT Just-In-Time compiler when handling immediate values for branch instructions on ARM64 architectures. This vulnerability allows the system to process values outside their intended...
CVE-2026-23417 bpf: Fix constant blinding for PROBE_MEM32 stores
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix constant blinding for PROBEMEM32 stores BPFST | BPFPROBEMEM32 immediate stores are not handled by bpfjitblindinsn, allowing user-controlled 32-bit immediates to survive unblinded into JIT-compiled native code when...
SUSE CVE-2014-9747
The t42parseencoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which allows remote attackers to cause a denial of service infinite loop via a Type42 font...
PT-2021-25044
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.8 Description The issue concerns the bpf and its handling of immediates, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2021-29038
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.8 Description The issue concerns the bpf and its handling of immediates, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations...
DEBIAN-CVE-2014-9747
The t42parseencoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which allows remote attackers to cause a denial of service infinite loop via a Type42 font...
UBUNTU-CVE-2014-9747
The t42parseencoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which allows remote attackers to cause a denial of service infinite loop via a Type42 font...