450 matches found
PT-2023-33320 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue is related to a null pointer check in the coretemp hwmon driver. It was introduced in version v3.0 and fixed in version v5.10.158. The actual impact and attack plausibility have...
PT-2023-33155 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a null pointer check in the coretemp component of the hwmon subsystem. It was introduced in version v3.0 and fixed in version v6.0.12. The actual impact and attack...
PT-2025-37898
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The btrtl set quirks function accessed a memory location without verifying its validity, potentially leading to a kernel error when a Realtek Bluetooth controller without a supported...
PT-2025-37610
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the return value of the devm kcalloc function is not checked. This can lead to a NULL pointer dereference if devm kcalloc returns NULL...
GSD-2022-1003296 lkdtm/bugs: Check for the NULL pointer after calling kmalloc
lkdtm/bugs: Check for the NULL pointer after calling kmalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...
PT-2022-30924
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A potential security issue exists due to a NULL pointer check after calling kmalloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2021-27285
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.15.11 Description A potential security issue exists due to a lack of NULL pointer check for mtk hdmi conf in the HDMI driver. The actual impact and attack plausibility have not yet been proven...
UVI-2021-1000954 usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL
usb: dwc3: gadget: Bail from dwc3gadgetexit if dwc-gadget is NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...
PT-2021-25004
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.9 Description: The issue concerns the addition of NULL pointer checks when freeing irqs. It was introduced in version v5.3 and fixed in version v5.12.9. The actual impact and attack plausibility have not y...
PT-2021-25089
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.124 Description The issue concerns the addition of NULL pointer checks when freeing irqs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...
PT-2018-3372
Name of the Vulnerable Software and Affected Versions: Samba versions 4.8.0 and later Description: The issue is related to a missing input sanitization flaw in the implementation of the LDP database used for the LDAP server, which can be exploited to cause a denial of service against a Samba serv...
DEBIAN-CVE-2018-10126
ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...
openSUSE Security Update : xen (openSUSE-2017-799)
This update for xen fixes several issues. These security issues were fixed : - CVE-2017-10912: Page transfer might have allowed PV guest to elevate privilege XSA-217, bsc1042882 - CVE-2017-10913 CVE-2017-10914: Races in the grant table unmap code allowed for informations leaks and potentially...
CVE-2016-10025
VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions aka SVM allows local HVM guest OS users to cause a denial of service hypervisor crash by leveraging a missing NULL pointer check...
Fedora 25 : xen (2016-92e3ea2d1b)
two security flaws 1406840 x86 PV guests may be able to mask interrupts XSA-202, CVE-2016-10024 x86: missing NULL pointer check in VMFUNC emulation XSA-203, CVE-2016-10025 x86: Mishandling of SYSCALL singlestep during emulation XSA-204, CVE-2016-10013 1406260 Note that Tenable Network Security ha...
SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:3208-1)
This update for xen fixes the following issues : - A Mishandling of SYSCALL singlestep during emulation which could have lead to privilege escalation. XSA-204, bsc1016340, CVE-2016-10013 - CMPXCHG8B emulation failed to ignore operand size override which could have lead to information disclosure...
CVE-2016-10025
VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions aka SVM allows local HVM guest OS users to cause a denial of service hypervisor crash by leveraging a missing NULL pointer check...
x86: missing NULL pointer check in VMFUNC emulation
ISSUE DESCRIPTION When support for the Intel VMX VMFUNC leaf 0 was added, a new optional function pointer hvmemulvmfunc was added to the hvmemulateops table. As is intended, that new function pointer is NULL on non-VMX hardware, including AMD SVM hardware. However at a call site, the necessary NU...
PT-2017-7711
Name of the Vulnerable Software and Affected Versions Xen versions 4.6.x through 4.8.x Description The issue allows local HVM guest OS users to cause a denial of service, resulting in a hypervisor crash, by leveraging a missing NULL pointer check in VMFUNC emulation on x86 systems using AMD...