188 matches found
PT-2022-33382 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a scheduling-while-atomic splat in nf tables within the netfilter component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
PT-2022-33666 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.65 Description: The issue is related to a lockdep splat with reloc root extent buffers in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...
GSD-2022-1004436 ipv6: fix lockdep splat in in6_dump_addrs()
ipv6: fix lockdep splat in in6dumpaddrs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.53 by commit...
GSD-2022-1004222 ipv6: fix lockdep splat in in6_dump_addrs()
ipv6: fix lockdep splat in in6dumpaddrs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.10 by commit...
Linux - Use-After-Free via race Between modify_ldt() and #BR Exception
Linux - Use-After-Free via race Between modifyldt and BR Exception / When a BR exception is raised because of an MPX bounds violation, Linux parses the faulting instruction and computes the linear address of its memory operand. If the userspace instruction is in 32-bit code, this involves looking...
Cross-site Scripting (XSS)
slim is vulnerable to cross-site scripting XSS attacks. The attacks are possible because it does not sanitize the splat attribute names of a tag e.g., params. It allows a malicious user to trigger the XSS attack when the user gets control over the attributes of a tag...
shopify-scripts: Denial of Service in mruby due to null pointer dereference
Hi, The following file causes a segmentation fault in mruby, which also causes a segmentation fault in mruby-engine. I've minimized this file down to the bare bones what crashes it, and renamed variables so you can see what is needed and what isn't. a="any splat operator", case "any object or nil...
