3260 matches found
kernel: Revert "Revert "block, bfq: honor already-setup queue merges""
A flaw was found in the Linux kernel's Block Layer BFQ I/O scheduler. A Use-After-Free UAF vulnerability could be triggered by a specific commit related to queue merges. This flaw could lead to a system crash, resulting in a Denial of Service DoS...
kernel: scsi: qla2xxx: Fix scheduling while atomic
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix scheduling while atomic The driver makes a call into midlayer fcremoteportdelete which can put the thread to sleep. The thread that originates the call is in interrupt context. The combination of the two trigge...
kernel: use-after-free due to improper update of reference count in net/sched/cls_u32.c
A use-after-free flaw was found in u32change in net/sched/clsu32.c in the network subcomponent of the Linux kernel. This flaw allows a local attacker to crash the system, cause a privilege escalation, and leak kernel information...
GSD-2022-1006677 net: sched: cake: fix null pointer access issue when cake_init() fails
net: sched: cake: fix null pointer access issue when cakeinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
kernel: scsi: qla2xxx: Fix scheduling while atomic
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix scheduling while atomic The driver makes a call into midlayer fcremoteportdelete which can put the thread to sleep. The thread that originates the call is in interrupt context. The combination of the two trigge...
Apache DolphinScheduler Path Traversal Vulnerability (CNVD-2022-78865)
Apache DolphinScheduler, a distributed DAG visualization-based workflow task scheduling system from the Apache Foundation, is vulnerable to a path traversal vulnerability in versions prior to Apache DolphinScheduler 3.0.0, which stems from a path traversal when a user adds a resource to the...
CVE-2022-40202
The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide malicious serialized objects which, when deserialized, could activate an opcode for a backup scheduling function without authentication...
CVE-2022-40202
The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide malicious serialized objects which, when deserialized, could activate an opcode for a backup scheduling function without authentication...
PT-2022-25280 · Delta Electronics · Infrasuite Device Master
Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior Description: The database backup function in the software lacks proper authentication, allowing an attacker to provide malicious serialized objects. When deserialized,...
kernel: use-after-free in route4_change() in net/sched/cls_route.c
A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading to a use-after-free condition. This flaw allows unprivileged local users to escalate their privileges on the system. T...
kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation
A use-after-free flaw was found in route4change in the net/sched/clsroute.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem...
PT-2022-34815 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.71 Description: The issue is related to the taprio component in the net/sched module, where offload can be disabled even if it was never enabled. The actual impact and attack plausibility have not yet been...
GSD-2022-1006352 sched/debug: fix dentry leak in update_sched_domain_debugfs
sched/debug: fix dentry leak in updatescheddomaindebugfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
Security Bulletin: TSM Client Web GUI Unauthorized Access Vulnerability (CVE-2013-0472)
Abstract An unauthorized access vulnerability exists in the IBM Tivoli Storage Manager TSM client Web GUI Content DESCRIPTION: A vulnerability in the TSM client Web GUI allows unauthorized access to the TSM server. CVEID: CVE-2013-0472 CVSS Base Score: 5.1 CVSS Temporal Score: See...
GSD-2022-1005203 sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed
sched, cpuset: Fix dlcpubusy panic due to empty cs-cpusallowed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...
GSD-2022-1005124 netfilter: nf_tables: fix scheduling-while-atomic splat
netfilter: nftables: fix scheduling-while-atomic splat This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...
PT-2022-7673 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.1 Description: The vulnerability is related to a "scheduling while atomic" bug in the Linux kernel, specifically in the ice driver. This bug occurs when the function to unplug aux devices is called twice,...
CVE-2022-36675
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /schedules/manageschedule.php...