961 matches found
kernel: Reserved fields in guest message responses may not be zero initialized
A flaw was found in some AMD CPUs where the guest message responses have not been zero-initialized. This issue may allow a local attacker with the ability to run arbitrary code on a container or virtual machine to discover sensitive information contained in the host system's memory...
kernel: Squashfs: check the inode number is not the invalid value of zero
A flaw was found in the squashfs module in the Linux kernel. A missing check of an inode number with an invalid value of zero can cause an out-of-bounds read and result in a denial of service...
SUSE CVE-2024-38659
In the Linux kernel, the following vulnerability has been resolved: enic: Validate length of nl attributes in enicsetvfport enicsetvfport assumes that the nl attribute IFLAPORTPROFILE is of length PORTPROFILEMAX and that the nl attributes IFLAPORTINSTANCEUUID, IFLAPORTHOSTUUID are of length...
The vulnerability of the orangefs_mount() function of the orangefs file system in Linux kernels allows a hacker to induce a service failure.
The vulnerability of the orangefsmount function in the fs/orangefs/super.c file of the orangefs file system in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
kernel: mtd: require write permissions for locking and badblock ioctls
A flaw was found in the Linux Kernel, requiring write permissions for locking and badblock ioctls, as they modify protection bits...
kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter
A flaw was foundin the Linux Kernel when specifying the srptserviceguid parameter, which may lead to kernel crash...
kernel: mtd: require write permissions for locking and badblock ioctls
A flaw was found in the Linux Kernel, requiring write permissions for locking and badblock ioctls, as they modify protection bits...
kernel: xhci: handle isoc Babble and Buffer Overrun events properly
A flaw was found in the Linux kernel related to the Extensible Host Controller Interface xHCI subsystem, specifically how it handles certain events. The issue arises when the xHCI driver improperly handles isochronous isoc Babble and Buffer Overrun events. The vulnerability occurs because the xHC...
kernel: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
A flaw was found in the Linux kernel. This vulnerability affects the ath9k wireless driver in the Linux kernel, specifically used with ath9khtc devices. The issue arises from a race condition where certain initialization processes are incomplete when the system begins handling WiFi-related events...
kernel: net/mlx5e: Prevent deadlock while disabling aRFS
A flaw was found in the Linus Kernel. A potential deadlock can occur while disabling aRFS in drivers/net/ethernet/mellanox/mlx5/core/enarfs.c...
kernel: use-after-free in l1oip timer handlers
A use-after-free flaw was found in the Linux kernel’s ISDN over IP tunnel functionality in how a local user triggers the releasecard function called from l1oipcleanup. This flaw allows a local user to crash or potentially escalate their privileges on the system...
kernel: Linux kernel: ACPICA undefined behavior due to zero offset to null pointer
A flaw was found in ACPICA in the Linux kernel. This vulnerability allows for a denial of service via a null pointer dereference...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a flaw in the f2fs module...
kernel: untrusted VMM can trigger int80 syscall handling
A flaw was found in the Linux kernel. A VMM can inject external interrupts on any arbitrary vector at any time, which may allow the guest OS to be manipulated from the VMM side...
kernel: untrusted VMM can trigger int80 syscall handling
A flaw was found in the Linux kernel. A VMM can inject external interrupts on any arbitrary vector at any time, which may allow the guest OS to be manipulated from the VMM side...
kernel: ipv4: NULL pointer dereference in ipv4_send_dest_unreach()
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer skb was assumed to be associated with a device before calling ipoptionscompile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAPNETADMIN privileges t...
kernel: net/mlx5e: Move representor neigh cleanup to profile cleanup_tx
A flaw was identified in the Linux kernel’s Mellanox mlx5 Ethernet driver net/mlx5e related to the cleanup order of neighbour information when handling offloaded IP tunnel encapsulation rules in ECMP Equal-Cost Multipath mode. In certain scenarios — such as unloading the eswitch device while an...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that a tasklet may hang on to another kernel, racing to remove irq...
kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion
A flaw was found in the filelockinit in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface POSIX file locks...
kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion
A flaw was found in the filelockinit in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface POSIX file locks...