947 matches found
kernel: mptcp: pm: Fix uaf in __timer_delete_sync
A use-after-free flaw was found in the Linux kernel’s Multipath TCP MPTCP subsystem. This flaw allows a local user to crash or potentially escalate their privileges on the system...
DEBIAN-CVE-2023-39179
A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on...
The vulnerability of the SCSI component in the Linux operating system allows a hacker to gain access to confidential information.
The vulnerability of the Linux operating system’s SCSI kernel component is related to excessive data output in the scsihostdevrelease function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
A flaw was found in the Linux kernel. A system error can be reliably replicated with specific filesystem settings, allowing an attacker to cause a denial of service...
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
A flaw was found in the Linux kernel. A system error can be reliably replicated with specific filesystem settings, allowing an attacker to cause a denial of service...
kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
A deadlock flaw was found in the Linux kernel’s pinctrl subsystem. This flaw allows a local user to crash the system...
kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter
A flaw was foundin the Linux Kernel when specifying the srptserviceguid parameter, which may lead to kernel crash...
kernel: zsmalloc: move LRU update from zs_map_object() to zs_malloc()
A flaw was found in the Linux kernel zsmalloc memory allocator. Under certain memory pressure and reclaim conditions, zsmalloc updated its LRU lists in an unsafe context, which could lead to list corruption due to a race between object mapping and allocation paths. A local user able to trigger...
kernel: crash due to a missing check for leb_size
A flaw was found in the Linux kernel. The createemptylvol function in the drivers/mtd/ubi/vtbl.c file can attempt to allocate zero bytes of memory when the LEB size is smaller than a single volume table record. This issue can result in a denial of service...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a missing memory allocation check...
kernel: block: initialize integrity buffer to zero before writing it to media
A flaw was found in the Linux kernel, where it initialized the integrity buffer to zero before writing it to media. Metadata added by biointegrityprep uses plain kmalloc, which leads to random kernel memory being written. Protection Information PI metadata is limited to the app tag not used by...
The vulnerability of the ntfs3 component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ntfs3 component in the Linux operating system’s kernel is related to errors in reading data beyond the boundaries of the buffer memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Vulnerabilities fixed in Google Android and Samsung Mobile
Google has fixed vulnerabilities in Android. Samsung has fixed vulnerabilities relevant to Samsung mobile devices in Samsung Mobile. A malicious person could exploit the vulnerabilities to cause a denial-of-service, grant themselves elevated privileges or execute arbitrary code. The most serious...
kernel: Possible Denial of Service on Intel(R) Processors
A vulnerability was found in the bus lock regulator mechanism for some Intel processors models. This issue may allow a malicious actor to achieve a Denial of Service attack, impacting the system availability of the targeted host...
kernel: af_unix: Fix garbage collector racing against connect()
A flaw was found in the Linux kernel, where the management of inter-process communication uses AFUNIX sockets. The issue arises from a race condition where a partially initialized socket with specific permissions carrying SCMRIGHTS is improperly handled during garbage collection. This situation...
kernel: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes
A flaw was found in the Linux Kernel. A lpageinfo overflow can occur when checking attributes. This may lead to a crash...
The vulnerability of the DRM/Nouveau kernel component in the Linux operating system arises from improper memory release before deleting the last reference, allowing a hacker to trigger a service failure.
The vulnerability of the DRM/Nouveau kernel component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause a service failure...
kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number
A flaw was found in the Linux kernel. Two TCP spoofing primitives exist where an attacker can brute force the server-chosen send window by acknowledging data that was never sent, called "ghost ACKs." There are side channels that also allow the attacker to leak the otherwise secret server-chosen...
kernel: uio: Fix use-after-free in uio_open
A flaw was found in the Linux kernel’s uio subsystem. A use-after-free memory flaw in the uioopen functionality allows a local user to crash or escalate their privileges on the system...