UBUNTU-CVE-2024-58034

In the Linux kernel, the following vulnerability has been resolved: memory: tegra20-emc: fix an OF node reference bug in tegraemcfindnodebyramcode As offindnodebyname release the reference of the argument device node, tegraemcfindnodebyramcode releases some device nodes while still in use,...

CVE-2024-58034 memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()

In the Linux kernel, the following vulnerability has been resolved: memory: tegra20-emc: fix an OF node reference bug in tegraemcfindnodebyramcode As offindnodebyname release the reference of the argument device node, tegraemcfindnodebyramcode releases some device nodes while still in use,...

CVE-2024-58034

CVE-2024-58034 in the Linux kernel fixes an OF node reference bug in memory: tegra20-emc. The issue arises when tegra_emc_find_node_by_ram_code() releases some device nodes while still in use, potentially causing use-after-free (UAF). The description states that the emc-tables node is a child wit...

UBUNTU-CVE-2024-57975

In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when rundelallocnocow failed BUG With CONFIGDEBUGVM set, test case generic/476 has some chance to crash with the following VMBUGONFOLIO: BTRFS error device dm-3: cowfilerange failed, start 1146880 e...

UBUNTU-CVE-2022-49557

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: KVM: Set the base guest FPU uABI size to sizeofstruct kvmxsave Set the starting uABI size of KVM's guest FPU to 'struct kvmxsave', i.e. to KVM's historical uABI size. When saving FPU state for usersapce, KVM well, now th...

CVE-2022-49094

CVE-2022-49094 affects the Linux kernel net/tls decrypt_internal path handling AES128-CCM. The bug arises because tls_ctx->rx.iv is 12 bytes while crypto_aead_ivsize("ccm(aes)") returns 16, causing a slab-out-of-bounds read during memcpy. The described fixes replace the call to crypto_aead_ivs...

Unbreakable Enterprise kernel security update

5.4.17-2136.340.4.1 - RDS: avoid queueing delayed work on an offlined cpu Praveen Kumar Kannoju Orabug: 37566743 5.4.17-2136.340.4 - ftrace: use preemptenable/disable notrace macros to avoid double fault Koichiro Den - nfsd: restore callback functionality for NFSv4.0 NeilBrown - i2c: pnx: Fix...

PT-2025-6321 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions affected versions not specified Description: The issue is related to a memory use after free vulnerability in the DHCP client of Windows operating systems. This can be exploited by a remote attacker to execute arbitrary code...

Linux kernel Bluetooth Mesh Buffer Overflow DoS

The vulnerability of the runtimers function in the net/bluetooth/mgmt.c module of Linux operating systems is related to the use of memory after it is freed during the processing of the struct hcidev object. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

pigweed:peer_cache_fuzzer: Use-of-uninitialized-value in unsigned long bt::Random<unsigned long>

Detailed Report: https://oss-fuzz.com/testcase?key=6254271758139392 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: peercachefuzzer Job Type: libfuzzermsanpigweed Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: unsigned long bt::Random bt::RandomPeerI...

SUSE CVE-2024-56677

In the Linux kernel, the following vulnerability has been resolved: powerpc/fadump: Move fadumpcmainit to setuparch after initmeminit During early init CMAMINALIGNMENTBYTES can be PAGESIZE, since pageblockorder is still zero and it gets initialized later during initmeminit e.g. setuparch -...

PT-2024-36985

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises during early initialization in the Linux kernel, specifically in the powerpc/fadump module. The problem occurs because CMA MIN ALIGNMENT BYTES can be PAGE SIZE during...

PT-2025-3653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a memory handling bug in the Linux kernel's buffered reads, specifically in the netfs read to pagecache function. When this function encounters an error from either...

PT-2024-9456 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Description: The issue is related to a remote code execution problem in the Windows Remote Desktop Services, which is associated with the use of memory after it has been freed...

webkitgtk: Processing web content may lead to arbitrary code execution

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in arbitrary code execution...

Remote Desktop Protocol RCE

The vulnerability of remote desktop protocol RDP clients for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Vim mark.c Data Compromise

The vulnerability of the mark.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions...

Red Database Heap Buffer Overflow DoS

The vulnerability of the TrigVector::release function module jrd.cpp in the “Red Database” database management system is related to the fact that when a trigger is executed, which also modifies another object in another context, there is a possibility of a crash due to the use of a previously fre...

Cisco IOS XR security vulnerabilities

Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. A security vulnerability exists in Cisco IOS XR that stems from the Mtrace2 code not handling packet memory correctly...

IBM MQ security vulnerabilities

IBM MQ Operator is a tool from International Business Machines IBM for managing the lifecycle of IBM MQ Queue Manager. A denial of service vulnerability exists in IBM MQ Operator versions 2.0.26 and 3.2.4, which stems from improper memory allocation and can be exploited by an attacker to cause a...