148 matches found
CVE-2023-53487 powerpc/rtas_flash: allow user copy to flash block cache objects
In the Linux kernel, the following vulnerability has been resolved: powerpc/rtasflash: allow user copy to flash block cache objects With hardened usercopy enabled CONFIGHARDENEDUSERCOPY=y, using the /proc/powerpc/rtas/firmwareupdate interface to prepare a system firmware update yields a BUG: kern...
kernel: cifs: Fix the smbd_response slab to allow usercopy
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbdresponse slab to allow usercopy The handling of received data in the smbdirect client code involves using copytoiter to copy data from the smbdreponse struct's packet trailer to a folioq buffer provided by...
CVE-2025-38523
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbdresponse slab to allow usercopy The handling of received data in the smbdirect client code involves using copytoiter to copy data from the smbdreponse struct's packet trailer to a folioq buffer provided by...
CVE-2025-38523
CVE-2025-38523 affects the Linux kernel CIFS/SMB client path. The issue stems from the smbd_response slab’s packet trailer not being marked as allowed for usercopy, causing kernel memory exposure checks in copy_to_iter() to trip when HARDENED_USERCOPY is enabled. The fix is in the kernel by confi...
DEBIAN-CVE-2025-38345
In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi operand cache leak in dswstate.c ACPICA commit 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I found an ACPI cache leak in ACPI early termination and boot continuing case. When early termination occurs due to maliciou...
UBUNTU-CVE-2025-38345
In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi operand cache leak in dswstate.c ACPICA commit 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I found an ACPI cache leak in ACPI early termination and boot continuing case. When early termination occurs due to maliciou...
CVE-1999-0084
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0...
The vulnerability of the kmem_cache_open() function in the mm/slub.c module of the Linux kernel’s memory management subsystem allows a hacker to induce a service failure.
The vulnerability of the kmemcacheopen function in the mm/slub.c module of the Linux kernel’s memory management subsystem is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the __kmem_cache_free_bulk() function in the Linux kernel’s memory management subsystem allows a attacker to trigger a system failure.
The vulnerability of the kmemcachefreebulk function in the Linux kernel’s memory management subsystem is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a system failure...
SUSE CVE-2024-56560
In the Linux kernel, the following vulnerability has been resolved: slab: Fix too strict alignment check in createcache On m68k, where the minimum alignment of unsigned long is 2 bytes: Kernel panic - not syncing: kmemcachecreateargs: Failed to create slab 'iokiocb'. Error -22 CPU: 0 UID: 0 PID: ...
UBUNTU-CVE-2024-53065
In the Linux kernel, the following vulnerability has been resolved: mm/slab: fix warning caused by duplicate kmemcache creation in kmembucketscreate Commit b035f5a6d852 "mm: slab: reduce the kmalloc minimum alignment if DMA bouncing possible" reduced ARCHKMALLOCMINALIGN to 8 on arm64. However, wi...
kernel: mm, slub: fix potential memoryleak in kmem_cache_open()
A potential memory leak was found in the Linux kernel, in kmemcacheopen. This issue may lead to compromised system availability...
kernel: mm, slub: fix potential memoryleak in kmem_cache_open()
A potential memory leak was found in the Linux kernel, in kmemcacheopen. This issue may lead to compromised system availability...
SUSE CVE-2024-44973
In the Linux kernel, the following vulnerability has been resolved: mm, slub: do not call doslabfree for kfence object In 782f8906f805 the freeing of kfence objects was moved from deep inside doslabfree to the wrapper functions outside. This is a nice change, but unfortunately it missed one spot ...
DEBIAN-CVE-2024-44973
In the Linux kernel, the following vulnerability has been resolved: mm, slub: do not call doslabfree for kfence object In 782f8906f805 the freeing of kfence objects was moved from deep inside doslabfree to the wrapper functions outside. This is a nice change, but unfortunately it missed one spot ...
UBUNTU-CVE-2024-44973
In the Linux kernel, the following vulnerability has been resolved: mm, slub: do not call doslabfree for kfence object In 782f8906f805 the freeing of kfence objects was moved from deep inside doslabfree to the wrapper functions outside. This is a nice change, but unfortunately it missed one spot ...
CVE-2024-39510 cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefilesondemanddaemonread We got the following issue in a fuzz test of randomly issuing the restore command: ================================================================== BUG: KASAN:...
SUSE CVE-2021-47466
In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential memoryleak in kmemcacheopen In error path, the randomseq of slub cache might be leaked. Fix this by using kmemcacherelease to release all the relevant resources...
DEBIAN-CVE-2021-47466
In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential memoryleak in kmemcacheopen In error path, the randomseq of slub cache might be leaked. Fix this by using kmemcacherelease to release all the relevant resources...
UBUNTU-CVE-2021-47466
In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential memoryleak in kmemcacheopen In error path, the randomseq of slub cache might be leaked. Fix this by using kmemcacherelease to release all the relevant resources...