Linux UFS kernel driver Heap Buffer Overflow DoS

The vulnerability of the ufshcdremove function in the UFS driver of the Linux operating system is related to an unvalidated return value, which leads to pointer dereferencing. Exploiting this vulnerability could allow a attacker to cause a service failure...

RLSA-2024:4260 Moderate: python-idna security update

The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture HSA Linux kernel driver amdkfd. Security Fixes: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 For more details about the security issues, includi...

hid-ctrl Heap Buffer Overflow DoS

Vulnerability of the hidctrl function in the drivers/hid/usbhid/hid-core.c module – The driver for the user interface devices in the Linux kernel is vulnerable to a memory leak before the last reference is freed. Exploiting this vulnerability could allow an attacker to compromise the...

amdgpu_get_xgmi_hive Heap Buffer Overflow DoS

Vulnerability of the amdgpugetxgmihive function in the drivers/gpu/drm/amd/amdgpu/amdgpuxgmi.c module – The Linux kernel driver for AMD GPU Direct Rendering Infrastructure supports is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cau...

Mellanox mlx5_cmd_init() Buffer Overflow DoS

Vulnerability of the mlx5cmdinit function in the drivers/net/ethernet/mellanox/mlx5/core/cmd.c file – The Mellanox Ethernet network adapter driver for Linux operating systems is vulnerable due to a reliance on the NULL pointer dereferencing mechanism. Exploiting this vulnerability could allow an...

PT-2025-29031

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: This issue resolves a critical lock within the iavf driver, eliminating error-prone logic associated with try locks. The resolution involves replacing the critical lock with a netdev...

Linux kernel md_check_recovery Heap Buffer Overflow DoS

Vulnerability of the mdcheckrecovery function in the drivers/md/md.c module – The Linux kernel’s device support driver for multiple devices such as RAID and LVM is vulnerable due to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause system...

Linux kernel network driver Heap Buffer Overflow DoS

The vulnerability of the icecreate VFEntries function in the Linux kernel driver is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the manaDestroyTxq function in the Linux kernel driver is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Wireless MCU Function CVE

Vulnerability of the mt7921mcutxratereport function in the drivers/net/wireless/mediatek/mt76/mt7921/mcu.c module – The driver for supporting wireless connection adapters in the Linux operating system is vulnerable due to buffer out-of-bounds reading. Exploiting this vulnerability could allow an...

amdgpu_dm Atomic Check DoS

Vulnerability of the amdgpudmatomiccheck function in the driver/gpu/drm/amd/display/amdgpudm/amdgpudm.c file – The driver for Linux operating system graphics cards that support Direct Rendering Infrastructure DRI is vulnerable due to a pointer issue related to NULL pointers. Exploiting this...

Linux kernel BPF DoS

The vulnerability of the am65cpswndobpf function in the Linux kernel driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux AMD pmc s2d init Heap Buffer Overflow DoS

The vulnerability of the amdpmcs2dinit function in the module drivers/platform/x86/amd/pmc.c of the Linux kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the dmubabmsetpipe function in the Linux kernel driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel driver Heap Buffer Overflow DoS

The vulnerability of the aquavanjaramswitchpartitionmode function in the Linux kernel driver is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to trigger a system failure...

Linux Trusted Platform Module Kernel Driver Heap Buffer Overflow DoS

The vulnerabilities of the functions tpm2FlushSpace and tpmDevTransmit in the Linux operating system’s Trusted Platform Module TPM kernel are related to the lack of memory release after the effective lifespan has ended. Exploiting these vulnerabilities can allow an attacker to trigger a service...

Linux Kernel Farch Buffer Overflow DoS

Vulnerability of the efxfarchhandletxevent function in the drivers/net/ethernet/sfc/farch.c module – The Linux kernel’s Ethernet network adapter support driver is vulnerable due to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a system...

atomisp_alloc_css_stat_bufs Heap Buffer Overflow DoS

Vulnerability of the atomispalloccssstatbufs function in the drivers/staging/media/atomisp/pci/atomispioctl.c module – The driver for Intel Atom-based devices in the Linux operating system is vulnerable to a vulnerability where memory previously released is re-released. Exploiting this...

Linux Kernel farch Handle TX Flush Done DoS

Vulnerability of the efxfarchhandletxFlushDone function in the drivers/net/ethernet/sfc/farch.c module – The Linux kernel’s Ethernet network adapter support driver is vulnerable due to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a system...

PT-2025-6661

Name of the Vulnerable Software and Affected Versions IntelR 800 Series Ethernet Driver versions prior to 1.15.4 Description The issue is related to incorrect execution-assigned permissions in the Linux kernel mode driver. This may allow an authenticated user to potentially enable information...