ROS-20241024-02

Vulnerability in the drm component of the Linux operating system kernel is related to use-after-use errors in the drmgemprimemmap release in the drmgemprimemmap function in drivers/gpu/drm/drmprime.c. Exploitation of the vulnerability could allow an attacker to escalate privileges on the system...

The vulnerability of the dbgfs component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the dbgfs component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the BUG_ON() function of the userfaultfd component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the BUGON function of the userfaultfd component in the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20241016-01

Vulnerability of nvmet-tcp component of Linux kernel is related to dereferencing of NULL pointer in the nvmettcpinstallqueue function in drivers/nvme/target/tcp.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in iwldeallocucode function in...

ROS-20241015-13

A vulnerability in the libceph component of the Linux kernel is related to incorrect input validation of the in the getreply and prepnextsparseread functions in net/ceph/osdclient.c, in the decrypttail and preparereadtailplain in net/ceph/messengerv2.c, in sizeoffooter, readpartialsparsemsgdata,...

ROS-20241009-03

A vulnerability in the ksmbd component of the Linux kernel is related to NULL pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the vcap component of the Linux operating system kernel is related to memory usage after...

ROS-20241004-05

A vulnerability in the s390/ptrace component of the Linux kernel is related to incorrect processing of the fpc register settings. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in the sc16is7xx component of the Linux kernel is related to...

The vulnerability of the usb_submit_urb() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the usbsubmiturb function in the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow a attacker to trigger a service failure...

The vulnerability of the RDMA/hns component of the Linux operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the RDMA/hns component of the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the da9211 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the da9211 component in the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: fork: defer linking file vma until vma is fully initialized

A flaw was found in the Linux kernel. A race condition can occur when the fork system call is called due to improper locking, triggering a warning, impacting system stability, and resulting in a denial of service...

The vulnerabilities of the functions btrfs_maybe_wake_unfinished Drop() and btrfs_add_dead_root() of the Linux kernel’s Btrfs component allow a malicious actor to trigger a service failure due to improper locking mechanisms.

The vulnerabilities of the functions btrfsmaybewakeunfinished Drop and btrfsadddeadroot in the Linux kernel’s Btrfs component are related to improper locking mechanisms. Exploiting these vulnerabilities could allow an attacker to trigger a service failure...

ROS-20240924-04

A vulnerability in the fastrpc component of the Linux operating system kernel is related to race conditions after a memory release. Exploitation of the vulnerability could allow an attacker to affect the confidentiality, integrity, and availability A vulnerability in the usbsubmiturb function of...

The vulnerability of the io_uring component in the Linux operating system’s kernel, related to improper locking mechanisms, allows attackers to trigger a service failure.

The vulnerability of the iouring component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20240919-02

Vulnerability of the reweightentity function of the sched component of the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to impact confidentiality, integrity, and availability. A...

The vulnerability of the xilinx_dpdma component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the xilinxdpdma component in the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly locking in the sanitycheckextentcache function, leading to a memory reuse after release issue...

The vulnerability of the cpus_read_lock() function in the Linux kernel’s cgroup component, which allows a hacker to cause a service failure.

The vulnerability of the cpusreadlock function in the Linux kernel’s cgroup component is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2024-32927

In sendDeviceState16 of RadioExt.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32927

In sendDeviceState16 of RadioExt.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...