kernel: iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()

In the Linux kernel, the following vulnerability has been resolved: iwcxgb4: Fix potential NULL dereference in c4iwfillrescmidentry This condition needs to match the previous "if epcp-state == LISTEN " exactly to avoid a NULL dereference of either "listenep" or "ep". The problem is that "epcp" ha...

SUSE CVE-2021-47192

In the Linux kernel, the following vulnerability has been resolved: scsi: core: sysfs: Fix hang when device state is set via sysfs This fixes a regression added with: commit f0f82e2476f6 "scsi: core: Fix capacity set to zero after offlinining device" The problem is that after iSCSI recovery, iscs...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to an incorrect state check in the display module, which may result in an out-of-bounds read...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to an incorrect state check in the display module, which may result in an out-of-bounds read...

PT-2023-7526 · Squid +10 · Squid +11

Name of the Vulnerable Software and Affected Versions: Squid versions prior to 6.5 Description: The issue is related to insufficient checking of exceptional states in the Squid proxy server, which can be exploited by a remote attacker to cause a denial of service. Squid is a caching proxy for the...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of MediaTek chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from an incorrect state check in cmdq, which may result in an out-of-bounds read...

The vulnerability of the __check_page_state_visitor() function in the arch/arm64/kvm/hyp/nvhe/mem_protect.c module of the KVM virtualization subsystem in the Linux operating system allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkpagestatevisitor function in the arch/arm64/kvm/hyp/nvhe/memprotect.c module of the KVM virtualization subsystem in the Linux operating system is related to incorrect checking of page availability. Exploiting this vulnerability could allow an attacker to compromise t...

Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a C-language source from Insyde Corporation of Taiwan that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O versions 5.2 to 5.5, which stems from the...

The vulnerability of the Elasticsearch search system, related to insufficient checking of exceptional states, allows a violator to trigger a service failure.

The vulnerability of the Elasticsearch search engine is related to insufficient checking of exceptional states. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted packets...

CVE-2019-2036

In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

Design/Logic Flaw

In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

PT-2019-4686 · Mediawiki · Mediawiki Oauth2 Client Extension

Name of the Vulnerable Software and Affected Versions: MediaWiki OAuth2 Client extension versions prior to 0.4 Description: A CSRF issue exists due to the OAuth2 state parameter not being checked in the callback function, allowing a remote attacker to perform a cross-site request forgery. This...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2018-0237)

The remote OracleVM system is missing necessary patches to address critical security updates : - dm: fix race between dmgetfromkobject and dmdestroy Hou Tao CVE-2017-18203 - drm: udl: Properly check framebuffer mmap offsets Greg Kroah-Hartman Orabug: 27986407 CVE-2018-8781 - kernel/exit.c: avoid...

Intel Graphics Driver Denial of Service Vulnerability

Intel Graphics Driver is an integrated graphics driver developed by Intel Corporation.User Mode Driver is one of the user mode drivers. A security vulnerability exists in the User Mode Driver in Intel Graphics Driver versions 15.40.x.4 and 21.20.x.x. The vulnerability stems from the program faili...