Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper release of references. This issue may lead to reuse after release...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper release of active objects, which could lead to a system crash...

Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash

...

SUSE-SU-2024:3744-1 Security update for qemu

This update for qemu fixes the following issues: Security fixes: - CVE-2024-8354: Fixed assertion failure in usbepget bsc1230834 - CVE-2024-8612: Fixed information leak in virtio devices bsc1230915 Update version to 8.2.7: Security fixes: - CVE-2024-7409: Fixed denial of service via improper...

GO-2022-0816 Improper Resource Shutdown or Release in HashiCorp Vault in github.com/hashicorp/vault

Improper Resource Shutdown or Release in HashiCorp Vault in github.com/hashicorp/vault...

CVE-2024-4693 Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash

A flaw was found in the QEMU Virtio PCI Bindings hw/virtio/virtio-pci.c. An improper release and use of the irqfd for vector 0 during the boot process leads to a guest triggerable crash via vhostnetstop. This flaw allows a malicious guest to crash the QEMU process on the host...

CVE-2024-4693

CVE-2024-4693 affects QEMU’s Virtio PCI Bindings (hw/virtio/virtio-pci.c). The issue is an improper release/use of irqfd for vector 0 during boot, leading to a guest-triggered crash of the host QEMU process via vhost_net_stop(). Exploitation would require a guest to trigger the path locally; CVSS...

CVE-2023-33049 Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage...

CVE-2022-22204

An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol SIP Application Layer Gateway ALG of Juniper Networks Junos OS allows unauthenticated network-based attacker to cause a partial Denial of Service DoS. On all MX and SRX platforms, if the...

CVE-2021-3544

Several memory leaks were found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory i.e., free after effective lifetime...

Exploit for Improper Resource Shutdown or Release in Microsoft

CVE-2018-8120 win7 x64 !testhttps:/...