9101 matches found
mm/khugepaged: fix ->anon_vma race
...
f2fs: fix KMSAN uninit-value in extent_info usage
...
Linux kernel skb_try_coalesce Heap Buffer Overflow DoS
The vulnerability of the skbtrycoalesce function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux UBI Create Volume Buffer Overflow
Vulnerability of the ubicreatevolume function in the drivers/mtd/ubi/vmt.c module – The Linux kernel’s memory support driver involves reusing previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
block/bfq-iosched Heap Buffer Overflow DoS
The vulnerability of the bfqsetupmerge function in the block/bfq-iosched.c module related to Linux kernel’s block-level support involves the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...
PT-2025-49071
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc5 Description The Linux kernel contains an uninitialized value issue within the hfsplus ext cache extent function. This issue was identified by syzbot and can lead to a kernel panic. The root cause is an...
Linux Distros Unpatched Vulnerability : CVE-2013-4739
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows...
Linux Distros Unpatched Vulnerability : CVE-2025-38579
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix KMSAN uninit- value in extentinfo usage KMSAN reported a use of...
PT-2025-49070
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-syzkaller Description The Linux kernel had an uninitialized value issue within the hfs find set zero bits function, specifically related to the HFS filesystem. The issue was identified by syzbot and involv...
Linux Distros Unpatched Vulnerability : CVE-2018-16948
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server routines did not fully initialize their output variables before...
Linux kernel mac80211 Stack Use-After-Free
The vulnerability of the function ieee80211vifusereservedcontext in the net/mac80211/chan.c module of the mac80211 stack in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
Linux block bfq-iosched Heap Buffer Overflow DoS
The vulnerability of the bfqbiomerge function in the block/bfq-iosched.c module relates to the reutilization of previously released memory in Linux’s kernel-level block storage mechanism. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
PT-2025-37981
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the communication buffer allocated by setup mm hdr was not contiguous, despite being expected to be by tee shm register kernel buf. This could le...
kernel: udp: Fix memory accounting leak.
A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...
kernel: udp: Fix memory accounting leak.
A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...
CVE-2025-38662
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365daisetpriv Given mt8365daisetpriv allocate privsize space to copy privdata which means we should pass mt8365i2sprivi or "struct mtkafei2spriv" instead of afepriv which ha...
DEBIAN-CVE-2025-38662
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365daisetpriv Given mt8365daisetpriv allocate privsize space to copy privdata which means we should pass mt8365i2sprivi or "struct mtkafei2spriv" instead of afepriv which ha...
CVE-2025-38662 ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365daisetpriv Given mt8365daisetpriv allocate privsize space to copy privdata which means we should pass mt8365i2sprivi or "struct mtkafei2spriv" instead of afepriv which ha...
CVE-2025-38639
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnfacct: don't assume acct name is null-terminated BUG: KASAN: slab-out-of-bounds in .. lib/vsprintf.c:721 Read of size 1 at addr ffff88801eac95c8 by task syz-executor183/5851 .. string+0x231/0x2b0 lib/vsprintf.c:721...
CVE-2025-38620 zloop: fix KASAN use-after-free of tag set
In the Linux kernel, the following vulnerability has been resolved: zloop: fix KASAN use-after-free of tag set When a zoned loop device, or zloop device, is removed, KASAN enabled kernel reports "BUG KASAN use-after-free" in blkmqfreetagset. The BUG happens because zloopctlremove calls putdisk,...