Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems, the configuration space is too large to be ioremaped all at once; thus, pciecamcreate maps each bus segment separately and relies on the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent NULL pointer dereferencing during unmount When flushing out outstanding glock work during an unmount, gfs2logflush may be called after sdp-sdjdesc has already been deallocated and sdp-sdjdesc is NULL. Commit...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: backend: fix error pointer dereference The function drmatomicgetplanestate can return an error pointer and is not checked for it. Add error pointer check. Detected by Smatch: drivers/gpu/drm/sun4i/sun4ibackend.c:496...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference if a malicio...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: Fix use-after-free in gadgetmatchdriver The udc structure serves as the management structure for the gadget, but their lifetimes are decoupled. A race condition exists where usbdelgadget frees the udc memory e.g...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dm-stats: A crash occurs if the allocation of per-cpu data fails. If dmkvzallocpercpuallocsize, cputonodecpu fails, the code jumps to the “out” label and calls dmstatfree. dmstatfree executes foreachpossiblecpucpu...

HPE NonStop SQL/MX Runtime Statistics Input Validation Error Vulnerability

HPE NonStop SQL/MX Run-Time Statistics T1117L40 and earlier versions contain an input validation error vulnerability. This vulnerability stems from memory corruption and null pointer dereferencing, potentially leading to process crashes, denial of service, or information leakage...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer error vulnerability. This vulnerability stems from an insecure pointer dereferencing issue in Microsoft Office Word, which may allow unauthorized attackers to leak information through the network...

ROS-20261014-73-0105

The vulnerability in the src/libbpf.c component of the BPF loader library in Libbpf is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261013-73-0067

The vulnerability of the acpica/evregion.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0063

The vulnerability of the greybus/light.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0477

The vulnerability of the s3c64xxspiremove function in the drivers/spi/spi-s3c64xx.c file of the Linux kernel’s SPI device driver is related to the pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20261013-73-0401

A vulnerability in the traceeventraweventsmcmsgevent function of the net/smc/smctracepoint.h module in the Linux kernel is related to pointer dereferencing. Exploitation of this vulnerability could allow an attacker to cause a denial of service...

TechSmith MP4V2 has vulnerabilities related to improper exception handling.

The Techsmith MP4V2 2.0.0 version has a vulnerability in exception handling. This vulnerability stems from a null pointer dereferencing in the src/mp4file.cpp function, MP4File::GenerateTracks. This could allow a remote attacker to cause a denial-of-service attack...

Marco Piovanello yt-dlp Web UI improper exception handling vulnerabilities

Marco Piovanello’s yt-dlp Web UI versions 4.0.0 and earlier have a vulnerability due to improper exception handling. This vulnerability stems from a null pointer dereferencing in the Service.Formats JSON-RPC method. Attackers can exploit this vulnerability by sending a single request with a url...

ROS-20261012-73-0192

The vulnerability of the csioscsi.c component in the Linux operating system’s kernel is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.3. It stems from bpfoffloaddevmatch within the bpf subsystem, which reverts to using an offdev pointer when netdev fails to match. As a result, programs bound to devices can run on other devices. Attackers possessing CAPBPF and CAPNETADMIN...

ROS-20261009-73-0187

The vulnerability of the drivers/video/fbdev/core/fbcon.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0279

The vulnerability of the drivers/staging/rtl8723bs/core/rtwmlme.c component in the Linux kernel is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261009-73-0189

The vulnerability of the fs/pstore/ramcore.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...