1517 matches found
DEBIAN-CVE-2023-52690
In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check to scomdebuginitone kasprintf returns a pointer to dynamically allocated memory which can be NULL upon failure. Add a null pointer check, and release 'ent' to avoid memory leaks...
The vulnerability of the pdsc_auxbus_dev_register() function in the drivers/net/ethernet/amd/pds_core/auxbus.c file of the AMD network device driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pdscauxbusdevregister function in the drivers/net/ethernet/amd/pdscore/auxbus.c file of the AMD network device driver for the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the btrfs_get_root_ref() function in the fs/btrfs/disk-io.c file of the Linux kernel’s file system allows a hacker to cause a service failure.
The vulnerability of the btrfsgetrootref function in the fs/btrfs/disk-io.c file of the Linux kernel’s file system is related to the repeated release of a reserved memory block. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions dm_mq_init_request_queue() and dm_mq_cleanup_mapped_device() in the Linux kernel’s drivers/md/dm-rq.c file allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions dmmqinitrequestqueue and dmmqcleanupmappeddevice in the Linux kernel’s drivers/md/dm-rq.c file are related to the repeated release of previously released memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality,...
The vulnerability of the qla2x00_els_dcmd_sp_free() function in the drivers/scsi/qla2xxx/qla_iocb.c module of the QLogic QLA2XXX Linux operating system kernel allows a attacker to cause a service failure or exert other effects.
The vulnerability of the qla2x00elsdcmdspfree function in the drivers/scsi/qla2xxx/qlaiocb.c module of the QLogic QLA2XXX Linux kernel driver is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure or have other...
The vulnerability of the ns_update_nuse() function in the drivers/nvme/host/sysfs.c file of the Linux operating system’s NVMe kernel driver allows a attacker to cause a service failure.
The vulnerability of the nsupdatenuse function in the drivers/nvme/host/sysfs.c file of the Linux NVMe kernel driver is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the smc_chan_free() function in the drivers/firmware/arm_scmi/smc.c module of the ARM System Control and Management Interface (SCMI) implementation of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the smcchanfree function in the drivers/firmware/armscmi/smc.c module, which is part of the ARM System Control and Management Interface SCMI implementation in the Linux operating system, relates to the re-release of previously released memory. Exploiting this vulnerability...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage in Xen hypervisors is related to memory release errors. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage in Xen hypervisors stems from memory release errors that can occur due to the creation of an arbitrary number of nodes through transactions. Exploiting this vulnerability can allow a attacker to cause service failures...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage in Xen hypervisors stems from memory release errors that can occur due to the creation of an arbitrary number of nodes through transactions. Exploiting this vulnerability can allow a attacker to cause service failures...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage in Xen hypervisors stems from memory release errors that can occur due to the creation of an arbitrary number of nodes. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.
The vulnerability of Xenstore information storage in Xen hypervisors stems from memory release errors that can occur due to the creation of an arbitrary number of nodes. Exploiting this vulnerability could allow a attacker to cause a service failure...
SUSE CVE-2024-27039
In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...
UBUNTU-CVE-2022-48675
In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead lock as part of ODP flow by using mmputasync. From the below call trace 1 can see that calling mmput once we have the umemodp-umemmutex locked as required by...
DEBIAN-CVE-2024-27039
In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...
UBUNTU-CVE-2024-27039
In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...
CVE-2024-27039 clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory release that appears to be incorrect...
kernel: Linux kernel CXL driver: Use-after-free vulnerability leading to system instability or privilege escalation
A flaw was found in the Linux kernel's CXL driver. This vulnerability, a use-after-free, allows a local user to cause system instability or a denial of service. The issue arises when the cxlparsecfmws function attempts to use memory that has already been released. This could potentially lead to...
kernel: net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, fix memory leak in mlx5drcmdcreatereformatctx when mlx5cmdexec failed in mlx5drcmdcreatereformatctx, the memory pointed by 'in' is not released, which will cause memory leak. Move memory release after mlx5cmdexec...