PT-2022-29300

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...

PT-2022-30050

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.15.32 Description The issue is related to an off-by-one error in the register cache size. It was introduced in version v5.12 and fixed in version v5.15.33. The actual impact and attack plausibility have n...

PT-2022-29648

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-30260

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30676

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30463

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-29975

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...

PT-2022-30586

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to an off-by-one error in the amdgpu gfx kiq acquire function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2022-29728

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.16.18 Description The issue is related to an off-by-one error in the register cache size. It was introduced in version v5.12 and fixed in version v5.16.19. The actual impact and attack plausibility have n...

CVE-2022-0878

Electric Vehicle EV commonly utilises the Combined Charging System CCS for DC rapid charging. To exchange important messages such as the State of Charge SoC with the Electric Vehicle Supply Equipment EVSE CCS uses a high-bandwidth IP link provided by the HomePlug Green PHY HPGP power-line...

PT-2025-8005 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A resolved issue in the Linux kernel involves the mremap syscall. When this syscall is called with old size=0 and ends up in move page tables, it unnecessarily calls invalidate range...

CVE-2022-1240

Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the rstrncpy function. Therefore I think it is very likely to be exploitable. For more general...

VulnCheck KEV: CVE-2021-3156

Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation...

PT-2022-38067

Уязвимость функции mtk ovl layer off модуля drivers/gpu/drm/mediatek/mtk disp drv.h драйвера поддержки инфраструктуры прямого рендеринга DRI видеокарт Mediatek ядра операционной системы Linux связана с некорректной зачисткой или освобождением ресурсов. Эксплуатация уязвимости может позволить...

Sudo Heap-Based Buffer Overflow Vulnerability

Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation...

Debian DLA-2970-1 : qemu - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2970 advisory. Several issues were discovered in QEMU, a fast processor emulator, which could result in denial of service, information disclosure or the the execution of arbitrar...

PT-2022-17807

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.9 Description The issue arises from racy interactions between dirty vram tracking and paging log dirty hypercalls. Activation of log dirty mode done by XEN DMOP track dirty vram previously named HVMOP track dirty vram...

libpff_item_tree_create_node Buffer Overflow DoS

The vulnerability of the libpffitemtreecreatenode function in the library for accessing PFF and OFF files is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause a service failure using a...

CVE-2022-0652

Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710...

glibc: Off-by-one buffer overflow/underflow in getcwd()

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to potentially execute...