CVE-2022-48725

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix refcounting leak in siwcreateqp The atomicinc needs to be paired with an atomicdec on the error path...

CVE-2022-48725 RDMA/siw: Fix refcounting leak in siw_create_qp()

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix refcounting leak in siwcreateqp The atomicinc needs to be paired with an atomicdec on the error path...

CVE-2022-48725

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix refcounting leak in siwcreateqp The atomicinc needs to be paired with an atomicdec on the error path...

RHEL 9 : scipy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - scipy: use-after-free in PyFindObjects function CVE-2023-29824 - A refcounting issue which leads to...

CVE-2021-47563

In the Linux kernel, the following vulnerability has been resolved: ice: avoid bpfprog refcount underflow Ice driver has the routines for managing XDP resources that are shared between ndobpf op and VSI rebuild flow. The latter takes place for example when user changes queue count on an interface...

CVE-2021-47534 drm/vc4: kms: Add missing drm_crtc_commit_put

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: kms: Add missing drmcrtccommitput Commit 9ec03d7f1ed3 "drm/vc4: kms: Wait on previous FIFO users before a commit" introduced a global state for the HVS, with each FIFO storing the current CRTC commit so that we can...

CVE-2021-47259

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4initclient KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server. Olga was able to hit this with kernels starting...

CVE-2023-52830

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-52830

CVE-2023-52830 corresponds to a Linux kernel Bluetooth subsystem issue. According to Red Hat, the vulnerability resides in hci_conn_cleanup, where during cleanup the same object could be freed multiple times due to redundant calls to hci_dev_put and hci_conn_put after it was released by hci_conn_...

CVE-2021-47259

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4initclient KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server. Olga was able to hit this with kernels starting...

CVE-2021-47259 NFS: Fix use-after-free in nfs4_init_client()

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4initclient KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server. Olga was able to hit this with kernels starting...

CVE-2021-47259 NFS: Fix use-after-free in nfs4_init_client()

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4initclient KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server. Olga was able to hit this with kernels starting...

CVE-2021-47259

CVE-2021-47259 is a Linux kernel use-after-free in NFS: nfs4_init_client. Public docs confirm KASAN-detected UAF when mounting two exports via two NICs on the same server; affected kernels include around 5.7–5.10 with the root cause linked to refcounting changes. The connected Astra/Unity/EulerOS...

CVE-2021-47259

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4initclient KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server. Olga was able to hit this with kernels starting...

DEBIAN-CVE-2024-35869

In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from parent session Avoid potential use-after-free bugs when walking DFS referrals, mounting and performing DFS failover by ensuring that all children from parent @tcon-ses are also...

RHEL 7 : scipy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - scipy: use-after-free in PyFindObjects function CVE-2023-29824 - A refcounting issue which leads to...

SUSE: Security Advisory (SUSE-SU-2024:1260-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2022-48699

In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in updatescheddomaindebugfs Kuyo reports that the pattern of using debugfsremovedebugfslookup leaks a dentry and with a hotplug stress test, the machine eventually runs out of memory. Fix this up by...

CVE-2024-26953

CVE-2024-26953 : In the Linux kernel, the esp implementation leaks pages from page_pool when skb fragments are freed during esp_output (not inline). This occurs during skb reorganization and can lead to a crash under CONFIG_DEBUG_VM with ipsec+gre forwarding. A patch introduces a dedicated wrappe...

SUSE-SU-2024:1265-1 Security update for xwayland

This update for xwayland fixes the following issues: - CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length bsc1222309. - CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply bsc1222310. - CVE-2024-31083: Fixed refcounting of glyphs during...