30 matches found
DEBIAN-CVE-2022-50575
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: Fix a possible warning in privcmdioctlmmapresource As 'kdata.num' is user-controlled data, if user tries to allocate memory larger than= MAXORDER, then kcalloc will fail, it creates a stack trace and messes up dmesg...
CVE-2024-58085 tomoyo: don't emit warning in tomoyo_write_control()
In the Linux kernel, the following vulnerability has been resolved: tomoyo: don't emit warning in tomoyowritecontrol syzbot is reporting too large allocation warning at tomoyowritecontrol, for one can write a very very long line without new line character. To fix this warning, I use GFPNOWARN...
CVE-2024-58085
CVE-2024-58085 relates to the Linux kernel Tomoyo security module, specifically a warning emission in tomoyo_write_control(). The description notes a syzbot report about a “too large allocation” warning when a long single line is written without a newline. The fix changes memory allocation behavi...
PT-2025-9975
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A warning has been resolved in the Linux kernel related to the tomoyo write control function. The issue arose when a very long line without a new line character was written, causing a to...
CVE-2024-45008: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at inputmtinitslots, for numslots is supplied from userspace using ioctlUIDEVCREATE. Since nobody knows possible max slots, this patch chose 1024...
PT-2024-31360
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a too large allocation at input mt init slots, where num slots is supplied from userspace using ioctlUI DEV CREATE. Since the maximum possible slots are unknown, ...
CVE-2024-6600
Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox 128, Firefox ESR 115.13, Thunderbird 115.13, and Thunderbird 128...
PT-2024-14734
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.12/6.6.2 Description A vulnerability in the Linux kernel's f2fs component can cause a null pointer dereference, leading to a panic. This issue occurs when a file with a compressed flag is created, compression...
GHSA-3WVG-MJ6G-M9CV Pillow Uncontrolled Resource Consumption
Pillow before 8.1.2 allows attackers to cause a denial of service memory consumption because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large...
CVE-2020-15213
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger a denial of service by causing an out of memory allocation in the implementation of segment sum. Since code uses the last element of the tensor holding them to determine the dimensionality of output tensor,...