812 matches found
Linux kernel 安全漏洞
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the possibility of overflowing the u16 DACL size when performing operations on setposixaclentriesdacl a...
CVE-2026-31636
In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix RESPONSE authenticator parser OOB read rxgkverifyauthenticator copies authlen bytes into a temporary buffer and then passes p + authlen as the parser limit to rxgkdoverifyauthenticator. Since p is a be32 , that inflate...
OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write
Summary The DWA lossy decoder constructs temporary per-component block pointers using signed 32-bit arithmetic. For a large enough width, the calculation overflows and later decoder stores operate on a wrapped pointer outside the allocated rowBlock backing store. This bug is reachable from the...
GHSA-P8XC-W3Q4-H64X OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write
Summary The DWA lossy decoder constructs temporary per-component block pointers using signed 32-bit arithmetic. For a large enough width, the calculation overflows and later decoder stores operate on a wrapped pointer outside the allocated rowBlock backing store. This bug is reachable from the...
The vulnerability of the icmp_tag_validation() function in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the icmptagvalidation function in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure by sending specially crafted ICMP packets...
The vulnerability of the xrep_revalidate_allocbt() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the xreprevalidateallocbt function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...
kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save
In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save Improper use of secondary pointer &dev-i2csubipregs caused kernel crash and out-of-bounds error: BUG: KASAN: slab-out-of-bounds in...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
The vulnerability of the net/sctp component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the net/sctp component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the net/sched component in the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the virtio-net component in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the virtio-net component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the fs/notify component in Linux operating systems allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the fs/notify component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the transport_ipc component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the transportipc component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
📄 PJSIP PJMEDIA H.264 Denial of Service
A logic validation flaw was identified in the H.264 packetization routine within the PJMEDIA component of PJSIP. Specifically, insufficient validation of FU-A Fragmentation Unit – Type A state handling in pjmediah264packetize may allow malformed RTP payloads to trigger unsafe pointer arithmetic...
The vulnerability of the kdc/do_tgs_req.c component of the Kerberos authentication protocol allows a attacker to induce a service failure.
The vulnerability of the kdc/dotgsreq.c component of the Kerberos authentication protocol is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the `nvmet_tcp_handle_h2c_data_pdu()` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the nvmettcphandleh2cdatapdu function in the operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the __kernel_read() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the kernelread function in the operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s ASoC kernel component, which allows a hacker to trigger a service failure
The vulnerability of the ASoC kernel component of the operating system is related to an error in pointer arithmetic. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
