Gitea’s improper exception handling vulnerabilities

Gitea 28.1.0 and earlier versions have a vulnerability related to improper exception handling. This vulnerability arises when the organization’s handler processes requests from individual users with the format username/-/repositories. In such cases, the handler may dereference an empty...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 2.6.31.2 to 2.6.32 have security vulnerabilities. These vulnerabilities stem from a lack of serialization in functions ttyportttyvhangup and ttyporthangup. When these functions compete with another hangup operation, they may return before the port is closed. This leads t...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the use of NULL pmuctx in the perfpmuschedtask function, which may lead to undefined behavior due to null pointer dereferencing in the kernel...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.15 contains a security vulnerability. This vulnerability stems from the mctpadddev function, which links the new mctpdev to dev-mctpptr before assigning the value to mdev-dev. When a reader accesses the device during this period, it may dereference a netdevice pointer...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the check for whether worker-currentpwq is empty during the flush dependency check was not performed properly. This could lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.12.19 to 6.12.112 and 6.13 contain security vulnerabilities. These vulnerabilities stem from the fact that drmfbdevclientrestore does not check fbhelper-info when restoring some initialized fbdev clients. This may lead to a null pointer derefrence when closing DRM...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains a security vulnerability. This vulnerability stems from the improper timing of releasing the mapping for each PHY interrupt in the .remove function of the mt7530removecommon. The regmap-irq chip uses devm for registration, and the parent interrupt is only...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains a security vulnerability. This vulnerability stems from the KVM arm64 nv module, which encounters a race condition with stage 2 teardown when handling nested wp/unmap operations. The module does not check whether pgt is empty, which may lead to null pointer...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 6.1.54 and earlier, 6.5.4 and earlier than 6.6, as well as 6.6 itself. These vulnerabilities stem from the virtiogpufencealloc function, which returns NULL under memory pressure. As a result, the caller does not check this value and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities stem from the failure to check whether dcsink is empty during MST mode validation. The functions dmdpmstisportsupportmode and getconvfrlbw access dcsink that has been asynchronously cleared, which may lead to nu...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.4 contains a security vulnerability. This vulnerability stems from the second PCI function detection in cdns3pciprobe, where pcigetdrvdata returns NULL. Subsequently, the assignment of wrap-devfn results in a null pointer dereferencing, which may lead to a kernel crash...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the independent channel allocation path not including the maximum Tx queue size. As a result, 128 vectors are recorded, but only 64 are allocated. When resource settings are made, NULL entries are...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the failure to reset the numnapi count when releasing the napi vector, resulting in null pointer dereferencing within the kernel...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains a security vulnerability. This vulnerability arises from pfcpnewlink creating a UDP socket before registernetdevice. After the registration fails, the socket is released repeatedly through an erroneous path, resulting in a null pointer dereference...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.33 contains security vulnerabilities. These vulnerabilities arise from the failure to restore the TTYIOERROR flag when the ttyport is activated. This can lead to I/O attempts when the port has disappeared or during power failures. When the TTY ioctl competes with...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the pvrmmumapsgl interface not correctly returning a failure to mapping operations. As a result, the pvrmmumap interface continues to execute instead of returning an error, which may lead to null point...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities arise from the fact that the link between the VMA resources is not released before destroying the page table in xevmcloseandput. As a result, concurrent threads may deallocate shared buffer objects and then call...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises when the user space provides full-speed descriptors, and FunctionFS runs at a higher speed. In this case, the FUNCTIONFSENDPOINTDESC ioctl only selects the endpoint descriptor at the current speed, without retreating to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.5 contains a security vulnerability. This vulnerability stems from the fact that in serialcoreunregisterport, when port-portdev is empty, the function passes it without checking, leading to a null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the failure to check the CQE during the removal of the XSK TX queue. This could result in a NULL CQE being passed to the mlx5exskfilltimestamp function, leading to a null pointer dereferencing...