USN-7184-1: Linux kernel vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...

USN-7184-1 linux-aws, linux-kvm vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...

USN-7140-2: Tinyproxy vulnerability

USN-7140-1 fixed CVE-2022-40468 in tinyproxy. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that Tinyproxy did not properly manage memory under certain circumstances. An attacker could possibly use this issue to leak left-over hea...

Qualcomm Chipsets 权限许可和访问控制问题漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets have a Privilege Permission and Access Control Issue vulnerability that arises from uncontrolled resource consumption when a driver, application, or SMMU client attempts to access global registers via...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-7184-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7184-1 advisory. Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-7185-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7185-1 advisory. Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local...

PT-2025-7090 · Libx264 +1 · Libx264 +1

Name of the Vulnerable Software and Affected Versions: libx264 version git master Description: The issue is related to insufficient tracking and releasing of allocated used memory in libx264, which allows attackers to execute arbitrary code via creating a crafted AAC file. Recommendations: For...

The vulnerability of the remap_pfn_range_notrack() function in the mm/memory.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the remappfnrangenotrack function in the mm/memory.c module of the Linux kernel’s memory management subsystem is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-2895

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained an issue in the mm/page alloc component where the migration type of page blocks was not consistently updated during page coalescing. Specifically, when a page...

PT-2025-36314

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A reference count leak exists in ksmbd when ksmbd conn releasingopinfo-conn returns true. This leak prevents the reference count from reaching zero, hindering memory release...

PT-2025-30853

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the bnxt en module of the Linux kernel related to DMA unmapping when transmitting XDP REDIRECT packets. Specifically, the dma unmap len set function was called with an...

PT-2025-46594

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc2 1134 Description The Linux kernel contains a flaw in the ext4 file system related to memory management during initialization. Specifically, a null pointer dereference can occur in the ext4 mb init...

PT-2026-8126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to IOMMU and stale IOTLB entries within the kernel address space. The issue involves the need to invalidate IOTLB paging cache entries before...

PT-2026-2866

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4 Description The Linux kernel had an issue in the f2fs file system related to the management of slab caches for extended attributes. Specifically, the system was creating per-superblock slab caches, whi...

CVE-2024-56711

In the Linux kernel, the following vulnerability has been resolved: drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference drmmodeduplicate could return NULL due to lack of memory, which will then call NULL pointer dereference. Add a check to prevent it...

CVE-2024-56708

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Avoid segmentation fault on module unload The segmentation fault happens because: During modprobe: 1. In igen6probe, igen6pvt will be allocated with kzalloc 2. In igen6registermci, mci-pvtinfo will point to...

CVE-2024-56611

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix migratetonode assuming there is at least one VMA in a MM We currently assume that there is at least one VMA in a MM, which isn't true. So we might end up having findvma return NULL, to then de-reference NULL. So...

CVE-2024-56566

A use-after-free list corruption vulnerability was found in the Linux kernel. If an allocated object fails in allocconsistencychecks, all objects of the slab will be marked as used and the slab will be removed from the partial list. When an object belonging to the slab gets freed later, the...

CVE-2024-56560

In the Linux kernel, the following vulnerability has been resolved: slab: Fix too strict alignment check in createcache On m68k, where the minimum alignment of unsigned long is 2 bytes: Kernel panic - not syncing: kmemcachecreateargs: Failed to create slab 'iokiocb'. Error -22 CPU: 0 UID: 0 PID: ...

CVE-2024-56534

In the Linux kernel, the following vulnerability has been resolved: isofs: avoid memory leak in iocharset A memleak was found as below: unreferenced object 0xffff0000d10164d8 size 8: comm "pool-udisksd", pid 108217, jiffies 4295408555 hex dump first 8 bytes: 75 74 66 38 00 cc cc cc utf8...