Linux kernel code issue vulnerability (CNVD-2023-34471)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in Linux kernel version 6.2.6 and earlier versions, which stems from a missing locksock call in the dotlsgetsockopt function in...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in Linux kernel version 6.2.6 and earlier versions, which stems from a missing locksock call in the dotlsgetsockopt function in...

The vulnerability of the asus_kbd_backlight_set() function (drivers/hid/hid-asus.c) in the ASUS Linux operating system’s USB keyboard driver allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the asuskbdbacklightset function drivers/hid/hid-asus.c in the ASUS Linux kernel-based USB keyboard driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the implementation of the Upper Level Protocol (ULP) in the Linux operating system allows a hacker to enhance their privileges, execute arbitrary code, or cause a service failure.

The vulnerability in the implementation of the Upper Level Protocol ULP in the Linux kernel’s inetconnectionsock.c file is related to improper handling of sockets that are in the LISTEN state in certain protocols. This leads to the reallocation of previously freed memory. Exploiting this...

kernel: use-after-free related to leaf anon_vma double reuse

A memory leak flaw with use-after-free capability was found in the Linux kernel. The VMA mm/rmap.c functionality in the ismergeableanonvma function continuously forks, using memory operations to trigger an incorrect reuse of leaf anonvma. This issue allows a local attacker to crash the system...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from memory reuse after release in Swiftshader. An attacker exploited the vulnerability to cause heap corruption via specially craft...

JTEKT Kostac PLC Programming Software 资源管理错误漏洞

JTEKT Kostac PLC Programming Software is PLC programmer software for personal computers from JTEKT Japan. A security vulnerability exists in JTEKT Kostac PLC Programming Software version 1.6.9.0 and prior versions, which originates from memory reuse after release. An attacker could exploit the...

Apple macOS 资源管理错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS prior to Ventura 13, which stems from a memory reuse after release issue. An attacker could exploit this vulnerability to cause the system to terminate...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome on Android prior to version 110.0.5481.177, which stems from memory reuse after release in the Web Payments API. An attacker exploits the vulnerability to cause heap corruption...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.177, which originates from memory reuse after release in Prompts. An attacker exploits the vulnerability to cause heap corruption via specially...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.177 that originates from memory reuse after release in SwiftShader. An attacker exploits the vulnerability to cause heap corruption via specially...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.177, which stems from memory reuse after release in Vulkan. An attacker exploits the vulnerability to cause heap corruption via specially crafted HT...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome on Windows prior to version 110.0.5481.177, which originates from memory reuse after release in WebRTC. An attacker exploits the vulnerability to cause heap corruption via...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.177, which originates from memory reuse after release in Video. An attacker exploits the vulnerability to cause heap corruption via specially crafte...

GlusterFS 资源管理错误漏洞

GlusterFS is the file system for Gluster by Gluster, Inc. A security vulnerability exists in Gluster GlusterFS version 11.0 that stems from memory reuse after release...

SUSE CVE-2019-18197

In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be...

SUSE CVE-2021-22945

When sending data to an MQTT server, libcurl = 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it again...

SUSE CVE-2021-28701

Another race in XENMAPSPACEgranttable handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, are de-allocated when a guest switches back from v2...

SUSE CVE-2022-23033

arm: guestphysmapremovepage not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm p2mremovemapping, guestphysmapremovepage, and p2msetentry with mfn set to INVALIDMFN do not actually clear the pagetable entry if the entry doesn't have the vali...

Apple iOS和iPadOS 资源管理错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A resource management error vulnerability exists in some Apple products, which is caused by memory reuse after releas...