The vulnerability of the ALSA kernel component in Linux operating systems, which allows a hacker to cause a service failure

The vulnerability of the ALSA kernel component in Linux operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the hns_dsaf_ge_srst_by_port() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function hnsdsafgesrstbyport in the Linux kernel’s drivers/net/ethernet/hisilicon/hns/hnsdsafmisc.c module is related to memory access beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

kernel: Fix of 6 CVEs

hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails CVE-2022-49029 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - ext4: no need to continue when the number of entries is 1 CVE-2024-49967 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - packet: in...

CVE-2024-33036

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access...

CVE-2024-33036

CVE-2024-33036: Memory corruption in Qualcomm camera driver parsing sensor packets. The root cause is using a user-space variable during kernel memory allocation/parsing, which can trigger large allocations or invalid memory access. Documented impact is memory corruption with potential out-of-bou...

CVE-2024-33036 Use of Out-of-range Pointer Offset in Camera Driver

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the idtable array in the vpvdpa component not being terminated with a null terminator, causing the...

Vulnerability of RDMA/mlx5 components of the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of the isofs component in Linux operating systems is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of RDMA/IRDMA components of the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of RDMA/IRDMA components in the Linux operating system is related to the assignment of the NULL pointer in the irdmaaddmqh4 function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Low-level invalid GF(2^m) parameters lead to OOB memory access

...

CVE-2024-47181

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RPL implementations is enabled and connected to an RPL...

CVE-2024-47181 Unaligned memory access in RPL option processing in Contiki-NG

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RPL implementations is enabled and connected to an RPL...

CVE-2024-47181 Unaligned memory access in RPL option processing in Contiki-NG

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RPL implementations is enabled and connected to an RPL...

CVE-2024-47181

CVE-2024-47181 affects Contiki-NG’s two RPL implementations. An unaligned memory access can occur when an IPv6 packet carries an odd number of padded bytes before the RPL option, causing rpl_ext_header_hbh_update to read a 16-bit integer from an odd address. The impact is architecture-dependent a...

The vulnerability of the isofs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the isofs component in the Linux operating system’s kernel is related to reading data beyond the allowed range in memory for the isofsread inode function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Contiki-NG 代码问题漏洞

Contiki-NG is a Contiki-NG open source operating system for resource-constrained devices in the Internet of Things. A code issue vulnerability exists in Contiki-NG 4.9 and earlier versions, which stems from an unaligned memory access issue in the RPL implementation that could cause a system crash...

CVE-2024-51569

Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI Number Of Completed Packets could lead to out-of-bound access when parsing HCI event and invalid read from HCI transport memory. This issue requires broken or bogus Bluetooth controller and thus severity is...

CVE-2024-51569

CVE-2024-51569 affects Apache NimBLE (through 1.7.0). The root cause is missing validation of HCI Number Of Completed Packets, leading to an out-of-bounds read while parsing HCI events and reading from HCI transport memory. The issue requires a broken/bogus Bluetooth controller to trigger the fau...

CVE-2017-11076

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder...

CVE-2017-11076 Use of Out-of-range Pointer Offset in Video

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder...