9157 matches found
PT-2025-49495
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc2 19 Description The Linux kernel contains an issue within the dm cache component. Specifically, the background tracker's queued work is not properly freed in the btracker destroy function. This can lead ...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-5829-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5829-1 advisory. It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A...
kernel: memory corruption in AX88179_178A based USB ethernet device.
A flaw was found in the Linux kernel’s driver for the ASIX AX88179178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes...
Apple tvOS security vulnerabilities
Apple tvOS is a set of smart TV operating systems from the American company Apple. A security vulnerability exists in Apple tvOS versions prior to 16.3, which stems from an information disclosure issue where an application may be able to determine the kernel memory layout...
PT-2023-18994 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.2 Description: The issue was addressed with improved memory handling. An app may be able to disclose kernel memory. Recommendations: For versions prior to 13.2, update to macOS Ventura 13.2 to resolve the issue...
Apple macOS Ventura security vulnerabilities
Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura prior to version 13.2 that stems from a memory handling issue where an application may leak kernel memory...
PT-2023-9763
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential Spectre v1 gadget in the xfrm xlate32 attr function. This could allow an attacker to leak kernel memory content to malicious users. The vulnerability ...
PT-2025-13343
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential spectre v1 gadget in the ip metrics convert function has been resolved. The issue arises from the use of the type variable as an array index, which could lead to cpu...
Use-After-Free
linux is vulnerable to Use-After-Free. net/bluetooth/l2capcore.c's l2capconnect and l2capleconnectreq functions may allow code execution and leak kernel memory remotely via Bluetooth, which allows a remote attacker to exploit the vulnerability via Bluetooth if they are within the proximity of the...
PT-2023-34159 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A memory leak issue was discovered in the test firmware init function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.14 and is...
PT-2023-34370 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.13 through 5.10.162 Description: A memory leak issue was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.13 through 5.10.162, update to versi...
PT-2023-34257 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.11 through v5.15.85 Description: A memory leak issue was discovered in the power state initialization of the AMDGPU powerplay PSM. The actual impact and attack plausibility have not yet been proven. This issue was...
Linux fs/io_uring.c DoS
The vulnerability of the fs/iouring.c component in the Linux kernel operating system is related to the reutilization of freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2023-12017)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12017 advisory. - proc: procskipspaces shouldn't think it is working on C strings Linus Torvalds Orabug: 34882775 CVE-2022-4378 - proc: avoid integer type confusi...
PT-2025-40160
Name of the Vulnerable Software and Affected Versions Linux kernel versions affected versions not specified Description The Linux kernel contains an issue where the iio Industrial I/O memory was allocated but not released during driver shutdown, leading to a kernel memory leak kmemleak. This occu...
Linux kernel Address Space Layout Randomization Memory Disclosure
The vulnerability of the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to obtain the basic Kernel ASLR address and gain access to the kernel’s memory...
OESA-2022-2162 kernel security update
Security Fixes: A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmdhdlfilter in drivers/staging/rtl8712/rtl8712cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges.CVE-2022-4095 There are null-ptr-deref...
OESA-2022-2160 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In TBD of TBD, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
OESA-2022-2161 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In TBD of TBD, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...