CVE-2023-52459

CVE-2023-52459 concerns the Linux kernel, specifically the media: v4l: async path. The vulnerability is caused by a duplicated list deletion: a second list_del() is performed after the list item was already removed, which can lead to list_del corruption (LIST_POISON) when CONFIG_DEBUG_LIST is ena...

CVE-2023-52459 media: v4l: async: Fix duplicated list deletion

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix duplicated list deletion The list deletion call dropped here is already called from the helper function in the line before. Having a second listdel call results in either a warning with CONFIGDEBUGLIST=y:...

DEBIAN-CVE-2023-52446

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a race condition between btfput and mapfree When running ./testprogs -j in my local vm with latest kernel, I once hit a kasan error like below: 1887.184724 BUG: KASAN: slab-use-after-free in bpfrbrootfree+0x1f8/0x2b0...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause a kernel error...

GSD-2022-1007655 RDMA/rxe: Fix "kernel NULL pointer dereference" error

RDMA/rxe: Fix "kernel NULL pointer dereference" error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...

FreeBSD 安全漏洞

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD versions 11.0 through 13.0, which stems from an aioaqueue kernel reference count error that can lead to local elevation of privilege...

Design/Logic Flaw

Butter is a system usability utility. Due to a kernel error the JPNS kernel is being discontinued. Affected users are recommend to update to the Trinity kernel. There are no workarounds...

Butter 输入验证错误漏洞

Butter is a small playground program. Butter has an input validation error vulnerability that stems from a kernel error...

Zephyr 代码问题漏洞

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. Zephyr suffers from a security vulnerability that stems from error handling in the Bluetooth HCI kernel. No detailed vulnerability details are provided at this time...

FreeBSD ipfw Buffer Overflow Vulnerability

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. ipfw is one of the IP firewall components. A buffer overflow vulnerability exists in ipfw in FreeBSD, which stems from a program's failure to properly validate packets, and can be exploited by an attacker to cause...

Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-36255)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An input validation error vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to cause a kernel error...

Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-32871)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A buffer overflow vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to cause a kernel error...

CVE-2019-10515

DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640,...

Code injection

DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640,...

CVE-2019-10515

DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640,...

CVE-2019-10515

CVE-2019-10515 describes a vulnerability in the DCI client on Qualcomm Snapdragon devices where a preemptively freed DCI client could be accessed to transfer packets, potentially causing a kernel error. Affected products listed in Red Hat/NVD entries include numerous Snapdragon Auto/IoT/Mobile fa...

CVE-2018-11960

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition can occur in the SPS driver which can lead to error in kernel...

CVE-2018-11960

CVE-2018-11960. A use-after-free condition in the Qualcomm HWEngines component (SPS driver) used in CAF Android builds (Linux kernel) can cause kernel errors. Affected context and wording in connected records indicate the issue arises within the SPS driver in Android CAF environments across affec...

IBM GPFS Denial of Service Vulnerability

IBM GPFS is an enterprise file management system optimized for petabyte-scale storage management from IBM, U.S.A. IBM Spectrum Scale is a scalable data and file management solution based on IBM GPFS. The solution supports helping clients reduce storage costs while improving security and managemen...

Google Android WLAN suffers from an unspecified vulnerability (CNVD-2019-28613)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and WLAN is a wireless connection module used in it. A security vulnerability exists in WLAN in Android, which stems from the program not properly validating array indexes. An...