Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.33 contains security vulnerabilities. These vulnerabilities arise from the failure to restore the TTYIOERROR flag when the ttyport is activated. This can lead to I/O attempts when the port has disappeared or during power failures. When the TTY ioctl competes with...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains a security vulnerability. This vulnerability arises from pfcpnewlink creating a UDP socket before registernetdevice. After the registration fails, the socket is released repeatedly through an erroneous path, resulting in a null pointer dereference...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.18 contains a security vulnerability. This vulnerability stems from the s390/cio subsystem, where the ccwdevicegetutilstr function does not check the return value of chpidtochp, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 2.6.31.2 to 2.6.32 have security vulnerabilities. These vulnerabilities stem from a lack of serialization in functions ttyportttyvhangup and ttyporthangup. When these functions compete with another hangup operation, they may return before the port is closed. This leads t...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the independent channel allocation path not including the maximum Tx queue size. As a result, 128 vectors are recorded, but only 64 are allocated. When resource settings are made, NULL entries are...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains a security vulnerability. This vulnerability arises from passing NULL as a register address during register registration for the divided clock. The Common Clock Framework calls clkdividerrecalcrate, which dereferences that address via readl. As a result, the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.26 contains security vulnerabilities. These vulnerabilities stem from race conditions in the tty ioctl and hang-up operations within the USB serial driver. Access to port driver data or hardware occurs without checking whether the port is already hung up. This could...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities stem from the failure to check whether dcsink is empty during MST mode validation. The functions dmdpmstisportsupportmode and getconvfrlbw access dcsink that has been asynchronously cleared, which may lead to nu...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.17 contains a security vulnerability. This vulnerability arises from the fact that when setting the Rx coalesce parameters before the interface is initially opened, the bcmgenetsetrxcoalesce function accesses ring-priv which points to NULL. This leads to a null pointer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability stems from the ofoverlayfdtapply function in of/overlay, which checks the return value of idralloc before execution. If this function fails, a negative ID passes the check, and uninitialized ovcs-ovcslist is...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the use of NULL pmuctx in the perfpmuschedtask function, which may lead to undefined behavior due to null pointer dereferencing in the kernel...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from the max30102 interrupt handler referencing an empty activescanmask when a buffer is not enabled, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.4 contains a security vulnerability. This vulnerability stems from the second PCI function detection in cdns3pciprobe, where pcigetdrvdata returns NULL. Subsequently, the assignment of wrap-devfn results in a null pointer dereferencing, which may lead to a kernel crash...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises when the user space provides full-speed descriptors, and FunctionFS runs at a higher speed. In this case, the FUNCTIONFSENDPOINTDESC ioctl only selects the endpoint descriptor at the current speed, without retreating to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.6 contains a security vulnerability. This vulnerability arises from the mtkethsoc driver, which allocates a dummy netdev after registering the MAC netdev and adds shared NAPIs. This results in a null pointer derefrence when network devices become visible prematurely,...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions from 5.10.258 to 5.11, from 5.15.165 to 5.16, from 6.1.105 to 6.2, from 6.6.46 to 6.7, from 6.10.5 to 6.11, and version 6.11. The vulnerability arises from the failure of the dcstatecreatecopy function to return a value, resulting in NU...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the vmgenid driver, which does not set the driverdata before registering the notification handler. When an interrupt occurs, the handler dereferes a null pointer, which may lead to kernel crashes...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities stem from the fact that devmclkget returns an error pointer, which is passed directly into clkgetrate without proper checking. This can lead to the error pointer being unreferenced, resulting in a crash...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.16.8 to 6.17 contain security vulnerabilities. These vulnerabilities arise when user integrity metadata is combined with direct I/O polling. In this scenario, IOCBHASMETADATA reserves iocb-private as uiometa, while iocbbioiopoll treats it as bio. This leads to calls to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from the KVM x86/mmu failing to terminate the traversal of shadow page tables immediately when the root is invalid or dummy root. When memslot creation competes with L2’s stage-2 page errors, the shadow pag...