CVE-2023-33067 Use of Out-of-range Pointer Offset in Audio

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points...

CVE-2023-33067 Use of Out-of-range Pointer Offset in Audio

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points...

CVE-2023-33067: Use of Out-of-range Pointer Offset

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points...

kernel: IGB driver inadequate buffer size for frames larger than MTU

A flaw was found in igbconfigurerxring in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel. An overflow of the contents from a packet that is too large will overflow into the kernel's ring buffer, leading to a system integrity issue...

kernel: IGB driver inadequate buffer size for frames larger than MTU

A flaw was found in igbconfigurerxring in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel. An overflow of the contents from a packet that is too large will overflow into the kernel's ring buffer, leading to a system integrity issue...

kernel: IGB driver inadequate buffer size for frames larger than MTU

A flaw was found in igbconfigurerxring in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel. An overflow of the contents from a packet that is too large will overflow into the kernel's ring buffer, leading to a system integrity issue...

UBUNTU-CVE-2023-6693

A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features VIRTIONETFHASHREPORT, VIRTIOFVERSION1 and VIRTIONETFMRGRXBUF are enabled. This could allow a malicious user to overwrite local variables...

kernel security update

5.14.0-362.13.0.13.OL9 - cifs: Fix UAF in cifsdemultiplexthread Zhang Xiaoxu Steve French CVE-2023-1192 - fs/smb/client: Reset password pointer to NULL Quang Le Steve French CVE-2023-5345 - igb: set max size RX buffer when store bad packet is enabled Tony Nguyen David S. Miller CVE-2023-45871 -...

CVE-2023-33087

Memory corruption in Core while processing RX intent request...

Memory corruption

Memory corruption in Core while processing RX intent request...

CVE-2023-33087 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core

Memory corruption in Core while processing RX intent request...

CVE-2023-33087

CVE-2023-33087 describes a memory corruption in Core when processing RX intent requests in Qualcomm chipsets (buffer copy without checking input size). Reported base CVSSv3.1: 7.8 (HIGH) with LOCAL attack vector, LOW exploit complexity, and no user interaction; impacts confidentiality, integrity,...

CVE-2023-33087: Buffer Copy without Checking Size of Input

Memory corruption in Core while processing RX intent request...

PT-2024-14653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the wifi: rtw88: sdio: Honor the host max req size in the RX path. Lukas reported skb over panic errors on his Banana Pi BPI-CM4, which comes with an Amlogic A311...

PT-2024-14772

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns enhanced error handling for tightly received RTS Request to Send messages in the xtp rx rts session new function of the Linux kernel's j1939 module. It replaces less...

CVE-2023-20568

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution...

CVE-2023-20567

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution...

CVE-2023-20568

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution...

Input validation

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution...

CVE-2023-20568

CVE-2023-20568 involves improper signature verification in the Radeon RX Vega M Graphics driver for Windows, allowing an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature and potentially achieve arbitrary code execution. The issue affects Radeon RX...