1278 matches found
GSD-2022-1003223 dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
dmaengine: zynqmpdma: In struct zynqmpdmachan fix descsize data type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...
GSD-2022-1003003 phy: qcom-qmp: fix struct clk leak on probe errors
phy: qcom-qmp: fix struct clk leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...
GSD-2022-1002915 dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
dmaengine: zynqmpdma: In struct zynqmpdmachan fix descsize data type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...
GSD-2022-1002565 dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
dmaengine: zynqmpdma: In struct zynqmpdmachan fix descsize data type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...
PT-2022-31810
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.12 through 5.10.120 Description The issue is related to a struct clk leak on probe errors in the qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-30919
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a struct clk leak on probe errors in the qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-32246
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a struct clk leak on probe errors in the qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-32127
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a struct clk leak on probe errors in the qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-31436
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.13 Description A potential security issue exists due to the allocation of kthread struct for init and umh. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-31566
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a struct clk leak on probe errors in the qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-31178
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue is related to a data type fix in the struct zynqmp dma chan. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-31123
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns the allocation of kthread struct for init and umh in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-31995
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to a struct clk leak on probe errors in the phy: qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-31446
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.13 Description The issue concerns the x86/fpu in KVM, where the base guest FPU uABI size is set to sizeofstruct kvm xsave. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2022-31266
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a struct clk leak on probe errors in the qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
Memory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`
Affected versions of this crate maintains references to memory that might have been freed already. If affects the following two tremor-script language constructs: A Merge where we assign the result back to the target expression and the expression to be merged needs to reference the event: let sta...
Arrow2 allows double free in `safe` code
The struct FfiArrowArray implements deriveClone that is inconsistent with its custom implementation of Drop, resulting in a double free when cloned. Cloning this struct in safe results in a segmentation fault, which is unsound. This derive was removed from this struct. All users are advised to...
PT-2025-26000
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the apparmor module. The issue occurs when the copy from user function fails, causing a memory leak due to th...
_transfer#Executor.sol not checking all enum values
Lines of code Vulnerability details Impact Transaction can revert or have unexpected behaviour Poc In transferexecutor.sol you are checking Itemtype values Itemtype.NATIVE, Itemtype.ERC20 and Itemtype.ERC721 after then the last else clause assumes that the Itemtype is a ERC1155. else @audit assum...
PT-2025-8331
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to a struct clk leak on probe errors in the phy: qcom-qmp module. The problem occurred when a late probe error happened, such as...