256 matches found
CVE-2021-46997
In the Linux kernel, the following vulnerability has been resolved: arm64: entry: always set GICPRIOPSRISET during entry Zenghui reports that booting a kernel with "irqchip.gicv3pseudonmi=1" on the command line hits a warning during kernel entry, due to the way we manipulate the PMR. Early in the...
CVE-2021-46997
In the Linux kernel, the following vulnerability has been resolved: arm64: entry: always set GICPRIOPSRISET during entry Zenghui reports that booting a kernel with "irqchip.gicv3pseudonmi=1" on the command line hits a warning during kernel entry, due to the way we manipulate the PMR. Early in the...
Spoofing
In the Linux kernel, the following vulnerability has been resolved: arm64: entry: always set GICPRIOPSRISET during entry Zenghui reports that booting a kernel with "irqchip.gicv3pseudonmi=1" on the command line hits a warning during kernel entry, due to the way we manipulate the PMR. Early in the...
CVE-2021-46910
In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUGKMAPLOCAL is enabled The debugging code for kmaplocal doubles the number of per-CPU fixmap slots allocated for kmaplocal, in order to use half of them as guard regions. This...
Linux 6.4 io_uring Use-After-Free Exploit
Linux =6.4: iouring: page UAF via buffer ring mmap Since commit c56e022c0a27 "iouring: add support for user mapped provided buffer ring", landed in Linux 6.4, iouring makes it possible to allocate, mmap, and deallocate "buffer rings". A "buffer ring" can be allocated with iouringregister...,...
PT-2023-33502 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 6.0.16 through 6.0.18 Description: The issue is related to a lockdep splat in the bond miimon commit function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...
GSD-2022-1005408 btrfs: fix lockdep splat with reloc root extent buffers
btrfs: fix lockdep splat with reloc root extent buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit...
PT-2022-33382 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a scheduling-while-atomic splat in nf tables within the netfilter component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
PT-2022-33666 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.65 Description: The issue is related to a lockdep splat with reloc root extent buffers in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...
GSD-2022-1004436 ipv6: fix lockdep splat in in6_dump_addrs()
ipv6: fix lockdep splat in in6dumpaddrs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.53 by commit...
GSD-2022-1004222 ipv6: fix lockdep splat in in6_dump_addrs()
ipv6: fix lockdep splat in in6dumpaddrs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.10 by commit...
PT-2025-8539
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel has been identified, specifically in the RDMA/irdma component. The issue arises when the qos mutex is taken to process RoCEv2 QP's on netdev events, resulting i...
Linux - Use-After-Free via race Between modify_ldt() and #BR Exception
Linux - Use-After-Free via race Between modifyldt and BR Exception / When a BR exception is raised because of an MPX bounds violation, Linux parses the faulting instruction and computes the linear address of its memory operand. If the userspace instruction is in 32-bit code, this involves looking...
Cross-site Scripting (XSS)
slim is vulnerable to cross-site scripting XSS attacks. The attacks are possible because it does not sanitize the splat attribute names of a tag e.g., params. It allows a malicious user to trigger the XSS attack when the user gets control over the attributes of a tag...
shopify-scripts: Denial of Service in mruby due to null pointer dereference
Hi, The following file causes a segmentation fault in mruby, which also causes a segmentation fault in mruby-engine. I've minimized this file down to the bare bones what crashes it, and renamed variables so you can see what is needed and what isn't. a="any splat operator", case "any object or nil...
