CVE-2023-31085

An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in dodivsz,mtd-erasesize, used indirectly by ctrlcdevioctl, when mtd-erasesize is 0...

CVE-2022-28497

TOTOLink outdoor CPE CP900 V6.3c.566B20171026 is discovered to contain a command injection vulnerability in the mtdwritebootloader function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

TOTOLINK CP900 命令注入漏洞

The TOTOLINK CP900 is a wireless router from China-based TOTOLINK. A security vulnerability exists in the TOTOLINK CP900 due to a command injection issue in the filename parameter of the mtdwritebootloader function...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.523.4.1 - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags Michal Hocko Orabug: 35164196 4.14.35-2047.523.4 - rds: ib: Keep IB MRs on cleanlist unless we are tearing down the pool Hakon Bugge Orabug: 34987235 - rds: ib: Add FRWR related statistics counters Hakon...

SUSE CVE-2008-4061

Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via an mtd...

PT-2023-36759

Уязвимость функции ubi resize volume модуля drivers/mtd/ubi/vmt.c драйвера памяти MTD ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

GSD-2023-1001635 mtd: Fix device name leak when register device failed in add_mtd_device()

mtd: Fix device name leak when register device failed in addmtddevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001628 mtd: maps: pxa2xx-flash: fix memory leak in probe

mtd: maps: pxa2xx-flash: fix memory leak in probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001478 mtd: Fix device name leak when register device failed in add_mtd_device()

mtd: Fix device name leak when register device failed in addmtddevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001464 mtd: maps: pxa2xx-flash: fix memory leak in probe

mtd: maps: pxa2xx-flash: fix memory leak in probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001176 mtd: Fix device name leak when register device failed in add_mtd_device()

mtd: Fix device name leak when register device failed in addmtddevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001167 mtd: lpddr2_nvm: Fix possible null-ptr-deref

mtd: lpddr2nvm: Fix possible null-ptr-deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001161 mtd: maps: pxa2xx-flash: fix memory leak in probe

mtd: maps: pxa2xx-flash: fix memory leak in probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000786 mtd: Fix device name leak when register device failed in add_mtd_device()

mtd: Fix device name leak when register device failed in addmtddevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000782 mtd: core: fix possible resource leak in init_mtd()

mtd: core: fix possible resource leak in initmtd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000763 mtd: maps: pxa2xx-flash: fix memory leak in probe

mtd: maps: pxa2xx-flash: fix memory leak in probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000761 mtd: core: Fix refcount error in del_mtd_device()

mtd: core: Fix refcount error in delmtddevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-34712

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.30 through 4.9.336 Description The issue concerns a device name leak that occurs when registering a device fails in the add mtd device function. This problem was introduced in version v2.6.30 and is fixed in Linux...

PT-2023-34555

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns a device name leak that occurs when registering a device fails in the add mtd device function. This problem was introduced in version v2.6.30 and is fixed in version...

PT-2023-34253

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue concerns a device name leak that occurs when registering a device fails in the add mtd device function. This problem was introduced in version v2.6.30 and is fixed in version...