422 matches found
GSD-2022-1006402 i40e: Fix kernel crash during module removal
i40e: Fix kernel crash during module removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.143 by commit...
GSD-2022-1006375 i40e: Fix kernel crash during module removal
i40e: Fix kernel crash during module removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...
GSD-2022-1006338 i40e: Fix kernel crash during module removal
i40e: Fix kernel crash during module removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
PT-2022-34676 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.213 Description: A potential issue in the i40e module could lead to a kernel crash during module removal. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...
GSD-2022-1003817 nbd: fix race between nbd_alloc_config() and module removal
nbd: fix race between nbdallocconfig and module removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...
GSD-2022-1003194 nbd: fix race between nbd_alloc_config() and module removal
nbd: fix race between nbdallocconfig and module removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...
GSD-2022-1002883 nbd: fix race between nbd_alloc_config() and module removal
nbd: fix race between nbdallocconfig and module removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...
GSD-2022-1002539 nbd: fix race between nbd_alloc_config() and module removal
nbd: fix race between nbdallocconfig and module removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...
Immature fCash positions should not be left behind when removing the NotionalTradeModule
Lines of code Vulnerability details function removeModule external override onlyValidAndInitializedSetISetTokenmsg.sender ISetToken setToken = ISetTokenmsg.sender; // Redeem matured positions prior to any removal action redeemMaturedPositionssetToken; // Try if unregister exists on any of the...
PT-2025-8429
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, which prevented a kernel crash when removing the mtk-vcodec-dec.ko module. The issue occurred when the driver supported subdev mode...
PT-2025-37618
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak within the orangefs sysfs init function when the orangefs module is inserted and removed. This results in unreferenced kobjects leaking memory. Th...
PT-2024-11287 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The SFC driver in the Linux kernel can be configured via modparam to work using MSI-X, MSI, or legacy IRQ interrupts. However, when using legacy IRQ interrupts, the interrupt was not...
grub2: Use-after-free in rmmod command
A flaw was found in grub2. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The...
grub2: Use-after-free in rmmod command
A flaw was found in grub2. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The...
DEBIAN-CVE-2019-11811
An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmisi module is removed, related to drivers/char/ipmi/ipmisiintf.c, drivers/char/ipmi/ipmisimemio.c, and drivers/char/ipmi/ipmisiportio.c...
UBUNTU-CVE-2019-11811
An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmisi module is removed, related to drivers/char/ipmi/ipmisiintf.c, drivers/char/ipmi/ipmisimemio.c, and drivers/char/ipmi/ipmisiportio.c...
CMS Made Simple Arbitrary File Deletion Vulnerability (CNVD-2018-08982)
CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. An arbitrary file deletion vulnerability exists in...
openSUSE Security Update : dracut (openSUSE-2017-482)
This update for dracut fixes the following issues : Security issues fixed : - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. bsc10083...
Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64
CVE-2009-2654 firefox: URL bar spoofing vulnerability CVE-2009-3070 Firefox 3.5 3.0.14 browser engine crashes CVE-2009-3071 Firefox 3.5.2 3.0.14 browser engine crashes CVE-2009-3072 Firefox 3.5.3 3.0.14 browser engine crashes CVE-2009-3074 Firefox 3.5 3.0.14 JavaScript engine crashes CVE-2009-307...
