Arrow2 allows double free in `safe` code

The struct FfiArrowArray implements deriveClone that is inconsistent with its custom implementation of Drop, resulting in a double free when cloned. Cloning this struct in safe results in a segmentation fault, which is unsound. This derive was removed from this struct. All users are advised to...

sysstat: memory corruption due to an integer overflow in remap_struct in sa_common.c

An integer overflow vulnerability was found in sysstat in the way the sadf command processes the contents of data files created by the sar command. A local attacker could exploit this flaw by creating a specially crafted file with malformed data that, when loaded by a victim, causes the applicati...

PT-2022-7644

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free error in the iwlwifi module of the Linux kernel. When no firmware is present or all firmware files fail to parse, the device release driver...

GSD-2022-1000058 mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()'

mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfstargetidswrite' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit...

SingleNativeTokenExitV2 assumes first exchange holds the outputToken

Handle kenzo Vulnerability details SingleNativeTokenExitV2 allows the user to exit and execute trades via multiple exchanges. When finishing the trades and sending a single output token back to the user, the contract takes that token from the last swap in the first exchange's trades. There is...

GSD-2021-1002201 IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields

IB/qib: Protect from buffer overflow in struct qibusersdmapkt fields This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002018 IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields

IB/qib: Protect from buffer overflow in struct qibusersdmapkt fields This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.157 by commit...

GSD-2021-1001987 IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields

IB/qib: Protect from buffer overflow in struct qibusersdmapkt fields This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.216 by commit...

UVI-2021-1001964 IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields

IB/qib: Protect from buffer overflow in struct qibusersdmapkt fields This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.255 by commit...

UVI-2021-1001943 IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields

IB/qib: Protect from buffer overflow in struct qibusersdmapkt fields This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.290 by commit...

PT-2021-30483

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.157 Description The issue concerns a buffer overflow in the struct qib user sdma pkt fields. This is an automated identification of a potential security issue, and its actual impact and attack plausibility...

PT-2021-30597

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue concerns a buffer overflow in the struct qib user sdma pkt fields. This is an automated identification of a potential security issue, and its actual impact and attack plausibility...

PT-2021-26536

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 5.10.76 Description The issue concerns a buffer overflow in the struct qib user sdma pkt fields. This problem was introduced in version v2.6.35 and is fixed in Linux Kernel version v5.10.77. The actual impa...

PT-2021-26602

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to a buffer overflow in the struct qib user sdma pkt fields. This could potentially lead to security vulnerabilities, although the actual impact and attack plausibility...

PT-2021-26671

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue concerns a buffer overflow in the struct qib user sdma pkt fields. This is an automated identification of a potential security issue, and its actual impact and attack plausibility ha...

PT-2021-30408

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.290 Description The issue concerns a buffer overflow in the struct qib user sdma pkt fields. This is an automated identification of a potential security issue, and its actual impact and attack plausibility...

PT-2021-30452

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.216 Description The issue concerns a buffer overflow in the struct qib user sdma pkt fields. This is an automated identification of a potential security issue, and its actual impact and attack plausibility...

PT-2021-30389

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.292 Description The issue is related to a buffer overflow in the struct qib user sdma pkt fields. This could potentially lead to security vulnerabilities, although the actual impact and attack plausibility...

PT-2021-26488

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.157 Description The issue concerns a buffer overflow in the struct qib user sdma pkt fields. This is an automated identification of a potential security issue, and its actual impact and attack plausibility...

PT-2021-26394

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.292 Description The issue concerns a buffer overflow in the struct qib user sdma pkt fields. This is an automated identification of a potential security issue, and its actual impact and attack plausibility...