91 matches found
SUSE CVE-2024-38388
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/csdspctl: Use privatefree for control cleanup Use the control privatefree callback to free the associated data block. This ensures that the memory won't leak, whatever way the control gets destroyed. The original...
kernel: platform/chrome: cros_ec_typec: zero out stale pointers
A use-after-free vulnerability exists in the Chrome EC Type-C driver in the Linux kernel. When crostypecgetswitchhandles fails to obtain switch handles, it frees allocated pointers but doesn't zero them out. These stale pointers can later be dereferenced, causing use-after-free or double-free...
UBUNTU-CVE-2024-26924
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: do not free live element Pablo reports a crash with large batches of elements with a back-to-back add/remove pattern. Quoting Pablo: addelem"00000000" timeout 100 ms ... addelem"0000000X" timeout 100 ms...
SUSE CVE-2010-4578
Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 do not properly perform cursor handling, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."...
PT-2023-33891
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue concerns stale pointers in the cros ec typec component. It was introduced in version v5.9 and fixed in version v6.0.16. The actual impact and attack plausibility have not yet been...
PT-2023-34267
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue concerns stale pointers in the cros ec typec component. It was introduced in version v5.9 and fixed in version v5.15.86. The actual impact and attack plausibility have not yet been...
PT-2025-49622
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the platform/chrome: cros ec typec component where stale pointers can occur after freeing memory in the cros typec get switch handles function. This...
CVE-2021-28688
The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...
Design/Logic Flaw
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when memory allocation fails while creating a calibration block in createcalblock stale pointers are left uncleared...
CVE-2017-11016: Improper Resource Shutdown or Release
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when memory allocation fails while creating a calibration block in createcalblock stale pointers are left uncleared...
PT-2017-11681
Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version Firefox OS for MSM versions prior to the fixed version QRD Android versions prior to the fixed version All Android releases from CAF using the Linux kernel versions prior to the fixed version...
Design/Logic Flaw
Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."...
Design/Logic Flaw
Google Chrome before 11.0.696.57 does not properly handle PDF forms, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."...
CVE-2011-1443
Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."...
CVE-2011-1443
Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."...
CVE-2011-1456
Google Chrome before 11.0.696.57 does not properly handle PDF forms, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."...
CVE-2011-1443
Removed by vendor...
PT-2011-3138
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 11.0.696.57 Description The issue is related to the improper implementation of layering, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. This i...
CVE-2011-1443: Improper Input Validation
Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."...
PT-2011-3151
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 11.0.696.57 Description The issue is related to the handling of PDF forms, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. This is due to "stal...