6824 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a bo leak in intelfbboframebufferinit...
CVE-2024-26988: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fix potential staticcommandline memory overflow We allocate memory of size 'xlen + strlenbootcommandline + 1' for staticcommandline, but the strings copied into staticcommandline are extracommandline and commandline,...
kernel: net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
A use-after-free vulnerability was found in the Linux kernel's netfilter queue subsystem. When setting up a new network namespace, if ops-init fails during opsinit, the allocated data is freed but the pointer in net-gen remains pointing to the freed memory. When nfqnlnfhookdrop is subsequently...
kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion
A flaw was found in the filelockinit in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface POSIX file locks...
kernel: net: mdio: unexport __init-annotated mdio_bus_init()
In the Linux kernel, the following vulnerability has been resolved: net: mdio: unexport init-annotated mdiobusinit EXPORTSYMBOL and init is a bad combination because the .init.text section is freed up after the initialization. Hence, modules cannot use symbols annotated init. The access to a free...
PT-2025-38184
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Bluetooth handling. Specifically, a NULL pointer dereference can occur in the hci uart tty close function due to a failure in percpu init rwse...
PT-2024-23866
Name of the Vulnerable Software and Affected Versions RIOT affected versions not specified Description The on rd init function in RIOT does not implement a size check before copying data to the result buf static buffer. This can cause a buffer overflow if an attacker crafts a long enough payload...
RHEL 6 / 7 : rh-mysql57-mysql (RHSA-2018:3655)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3655 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The...
PT-2024-24933
Name of the Vulnerable Software and Affected Versions Llama.cpp versions prior to the version patched in commit b2740 Description The issue is related to the use of an uninitialized heap variable in the gguf init from file function. This can cause the program to crash, leading to a denial of...
PT-2024-5408
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue is related to a potential buffer overflow in the gfx v9 4 3 init microcode function in the gfx v9 4 3.c file of the Linux kernel's amdgpu driver. The problem arises from the use of th...
kernel: netfilter: divide error in nft_limit_init
A denial of service flaw was found in nftlimitinit in netfilter's nftlimit in the Linux Kernel. This issue occurs due to an inappropriate math function selection, which may cause an availability threat...
Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin
A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...
AZL-40016 CVE-2024-3177 affecting package kubernetes for versions less than 1.30.1-1
A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...
CVE-2024-3177
A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...
CLSA-2024-1713790844 Fix of 12 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-23307 - md/raid5: fix atomicity violation in raid5cachecount CVE-url: https://ubuntu.com/security/CVE-2021-46932 - Input: appletouch - initialize work before device registration CVE-url: https://ubuntu.com/security/CVE-2021-46936 - net: fix...
ROS-20240422-01
Vulnerability in the OpenSC smart card software toolkit and libraries is related to a bug in the AuthentIC driver and occurs during card registration using pkcs15-init. a bug in the AuthentIC driver and occurs during the card registration process using pkcs15-init, when a user or administrator...
The vulnerability of the nft_limit_init function’s div_u64() kernel function in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the nftlimitinit divu64 function in the Linux operating system is related to the lack of checks to ensure that mathematical operations are performed correctly. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE CVE-2024-26839
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix a memleak in initcreditreturn When dmaalloccoherent fails to allocate dd-crbasei.va, initcreditreturn should deallocate dd-crbase and dd-crbasei that allocated before. Or those resources would be never freed and a...
PT-2024-30686
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the PCI endpoint in the Linux kernel, specifically with the pci epf test core init function. Instead of getting epc features from the pci epc get features API, th...