4321 matches found
CVE-2023-54281
CVE-2023-54281 (Linux kernel, btrfs) : The issue affects the btrfs inode lookup path during ino_lookup ioctl. When ino_lookup triggers btrfs_iget() to obtain an inode reference while holding the root btree, it may need to acquire an additional lock on the same/btrfs root path, risking a deadlock ...
CVE-2022-50836
The CVE-2022-50836 issue in the Linux kernel’s remoteproc: sysmon subsystem (qcom_add_sysmon_subdev) caused a memory leak. Root cause: kfree() was not invoked when of_irq_get_byname() or devm_request_threaded_irq() failed, leading to leaked memory. The fix adds a kfree() path to ensure proper cle...
CVE-2023-54198
CVE-2023-54198 affects the Linux kernel tty subsystem: tty_driver_lookup_tty() can return a tty object for an invalid index when an invalid console= is given (e.g., console=tty3270), leading to a NULL-pointer dereference in tty_open. The issue was fixed in the kernel (tty: fix out-of-bounds acces...
CVE-2023-54198 tty: fix out-of-bounds access in tty_driver_lookup_tty()
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
CVE-2023-54198 tty: fix out-of-bounds access in tty_driver_lookup_tty()
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
CVE-2023-54178 of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()
In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix null pointer dereferencing in ofunittestfindnodebyname when kmalloc fail to allocate memory in kasprintf, name or fullname will be NULL, strcmp will cause null pointer dereference...
PT-2025-54027
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the tty driver lookup tty function that can lead to an out-of-bounds access. This occurs when an invalid console device is specified, such as...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from performing an inode lookup while holding a path to the root node btree, which could result in a deadloc...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992285)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992285 advisory. In the Linux kernel, the following vulnerability has been resolved: android: binder: stop saving a pointer to the VMA Do not record a pointer to a VMA outside of the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992627)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992627 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a node reference count imbalance in the regulatordevlookup function, which could lead to a memory leak...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds access to the ttydriverlookuptty function...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improper device tree lookup, which could lead to a system hang...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992503)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992503 advisory. In the Linux kernel, the following vulnerability has been resolved: PM: EM: fix memory leak with using debugfslookup When calling debugfslookup the result must have...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992536)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992536 advisory. In the Linux kernel, the following vulnerability has been resolved: kernel/failfunction: fix memory leak with using debugfslookup When calling debugfslookup the resu...
PT-2025-54123
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s regulator core, specifically within the regulator dev lookup function, leading to an unbalanced device tree node reference count. This occurs because...
CVE-2025-15176 Open5GS PFCP Session Establishment Request rule-match.c ogs_pfcp_pdr_rule_find_by_packet assertion
A flaw has been found in Open5GS up to 2.7.5. This affects the function decodeipv6header/ogspfcppdrrulefindbypacket of the file lib/pfcp/rule-match.c of the component PFCP Session Establishment Request Handler. Executing a manipulation can lead to reachable assertion. It is possible to launch the...
Exploit for Insufficient Type Distinction in Rarlab Winrar
CVE Exploit Finder Author: Your Name/Handle Focus: Automated V...
CVE-2022-50755
In the Linux kernel, the following vulnerability has been resolved: udf: Avoid double brelse in udfrename syzbot reported a warning like below 1: VFS: brelse: Trying to free free buffer WARNING: CPU: 2 PID: 7301 at fs/buffer.c:1145 brelse+0x67/0xa0 ... Call Trace: invalidatebhlru+0x99/0x150...
UBUNTU-CVE-2022-50747
In the Linux kernel, the following vulnerability has been resolved: hfs: Fix OOB Write in hfsasc2mac Syzbot reported a OOB Write bug: loop0: detected capacity change from 0 to 64 ================================================================== BUG: KASAN: slab-out-of-bounds in...