CVE-2024-56777

CVE-2024-56777 affects the Linux kernel DRM STI path. The vulnerability arises because the return value of drm_atomic_get_crtc_state() is not checked before dereferencing the potential error pointer crtc_state in sti_gdp_atomic_check, which can lead to an invalid memory access if the call fails. ...

CVE-2024-56777 drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in stigdpatomiccheck The return value of drmatomicgetcrtcstate needs to be checked. To avoid use of error pointer 'crtcstate' in case of the failure...

CVE-2024-56776

Technical details for CVE-2024-56776 are not provided in the supplied connected documents. Public details are unavailable here. Action: monitor for updates from security advisories.

PT-2025-3323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the drm/sti component. The issue involves a potential dereference of error pointers, specifically with the crtc state...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from the STI DRM driver not checking the return value of drmatomicgetcrtcstate in the stihqvdpatomiccheck...

PT-2025-3324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential dereference of error pointers in the sti gdp atomic check function has been resolved. The return value of drm atomic get crtc state needs to be checked to avoid use of the...

PT-2025-36479

Name of the Vulnerable Software and Affected Versions: SQLite FTS5 extension affected versions not specified Description: An integer overflow exists in the FTS5 extension. The issue occurs when calculating the size of an array of tombstone pointers, leading to truncation into a 32-bit integer. Th...

PT-2025-40076

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s mm/slub subsystem within the object err function. This function is designed to report object details for debugging purposes, including freelist pointe...

PT-2025-36271

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The qla4xxx get ep fwdb function may not return NULL on error, potentially leading to an Oops in the caller due to error pointers being propagated from qla4xxx ep connect. The issue...

PT-2025-30777

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the rose rt device down function related to dangling neighbour pointers. Two bugs exist: modification of the loop bound t-count within a loop,...

CVE-2024-56702

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark rawtp arguments with PTRMAYBENULL Arguments to a raw tracepoint are tagged as trusted, which carries the semantics that the pointer will be non-NULL. However, in certain cases, a raw tracepoint argument may end up being...

SUSE CVE-2024-56702

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark rawtp arguments with PTRMAYBENULL Arguments to a raw tracepoint are tagged as trusted, which carries the semantics that the pointer will be non-NULL. However, in certain cases, a raw tracepoint argument may end up being...

CVE-2024-56702

The CVE-2024-56702 issue is a Linux kernel fix for BPF raw tracepoints. It explains that raw_tp arguments were previously treated as non-NULL, risking NULL dereferences when NULL values occur. The fix marks raw_tp arguments as PTR_MAYBE_NULL and adjusts dereferences, arithmetic, and allowed passe...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the cred pointer not being passed correctly in the ceph module, resulting in redundant getcurrentcred calls and...

Unsound usages of `u8` type casting in spl-token-swap

The library provides a safe public API unpack to cast u8 array to arbitrary types, which can cause to undefined behaviors. The length check of array can only prevent out-of-bound access on the return type. However, it can't prevent misaligned pointer when casting u8 pointer to a type aligned to...

PT-2024-40316 · Solana · Solana Program Library

Name of the Vulnerable Software and Affected Versions: Solana Program Library affected versions not specified Description: The issue arises from the unpack function in the library, which casts a u8 array to arbitrary types. This can lead to undefined behaviors due to misaligned pointer dereferenc...

PT-2025-6759

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when a CPU transitions from an online state to a hotunplug state and back, without properly handling the CPU state. Specifically, hrtimers prepare cpu does not run,...

gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer

A flaw was found in the Matroska/WebM demuxer in the GStreamer library. Processing a specially crafted input file can cause the usage of uninitialized stack memory, allowing calls to uninitialized function pointers, potentially resulting in code execution or an application crash...

gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer

A flaw was found in the Matroska/WebM demuxer in the GStreamer library. Processing a specially crafted input file can cause the usage of uninitialized stack memory, allowing calls to uninitialized function pointers, potentially resulting in code execution or an application crash...

PT-2025-3335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between reference pointers in the Linux kernel's ethernet oa tc6 module. This issue arises from the management of two skb pointers: waiting tx skb and ongoing tx...