Lucene search
+L

480 matches found

OSV
OSV
•added 2024/05/21 4:15 p.m.•25 views

UBUNTU-CVE-2023-52840

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmiunregisterfunction The putdevice calls rmireleasefunction which frees "fn" so the dereference on the next line "fn-numofirqs" is a use after free. Move the putdevice to the end to...

7.8CVSS6.5AI score0.00242EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2024/05/21 4:15 p.m.•28 views

CVE-2023-52840

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmiunregisterfunction The putdevice calls rmireleasefunction which frees "fn" so the dereference on the next line "fn-numofirqs" is a use after free. Move the putdevice to the end to...

7.8CVSS6AI score0.00242EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2024/05/21 3:31 p.m.•28 views

CVE-2023-52840

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmiunregisterfunction The putdevice calls rmireleasefunction which frees "fn" so the dereference on the next line "fn-numofirqs" is a use after free. Move the putdevice to the end to...

7.8CVSS7.2AI score0.00242EPSS
SaveExploits0
CVE
CVE
•added 2024/05/21 3:31 p.m.•196 views

CVE-2023-52840

CVE-2023-52840 is a Linux kernel flaw in the synaptics-rmi4 driver where a use-after-free occurs in rmi_unregister_function() due to a premature dereference after put_device() calls rmi_release_function(). The fix moves the put_device() call to the end, preventing the subsequent access (fn->nu...

7.8CVSS6.8AI score0.00242EPSS
SaveExploits0References8Affected Software1
Vulnrichment
Vulnrichment
•added 2024/05/21 3:31 p.m.•27 views

CVE-2023-52840 Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmiunregisterfunction The putdevice calls rmireleasefunction which frees "fn" so the dereference on the next line "fn-numofirqs" is a use after free. Move the putdevice to the end to...

6.9AI score0.00242EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2024/05/21 3:31 p.m.•28 views

CVE-2023-52840 Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmiunregisterfunction The putdevice calls rmireleasefunction which frees "fn" so the dereference on the next line "fn-numofirqs" is a use after free. Move the putdevice to the end to...

6.6AI score0.00242EPSS
SaveExploits0References8
OSV
OSV
•added 2024/05/21 3:31 p.m.•24 views

CVE-2023-52840 Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmiunregisterfunction The putdevice calls rmireleasefunction which frees "fn" so the dereference on the next line "fn-numofirqs" is a use after free. Move the putdevice to the end to...

6.1AI score
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/21 12:00 a.m.•1 views

CVE-2023-52840: Use After Free

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmiunregisterfunction The putdevice calls rmireleasefunction which frees "fn" so the dereference on the next line "fn-numofirqs" is a use after free. Move the putdevice to the end to...

7.8CVSS6.2AI score0.00242EPSS
SaveExploits0References1
Lenovo
Lenovo
•added 2024/05/14 8:58 p.m.•5 views

Synaptics Fingerprint Driver Vulnerability - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•13 views

Synaptics SynHsaService 安全漏洞

Synaptics SynHsaService is a driver from Synaptics, Inc. A security vulnerability exists in Synaptics SynHsaService that stems from a missing lock check...

5.5CVSS6.6AI score0.00156EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•3 views

CVE-2023-5447: Missing Lock Check

Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardware Support App...

5.5CVSS6.1AI score0.00156EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/11 2:41 a.m.•21 views

CVE-2023-5447 Use-After-Free in Service for Hardware Support App for Fingerprint Driver

Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardware Support App...

5.5CVSS7AI score0.00156EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/11 12:00 a.m.•11 views

PT-2024-14809 · Synaptics · Synaptics Fingerprint Driver

Name of the Vulnerable Software and Affected Versions: Synaptics Fingerprint Driver versions prior to 6.0.39.1136 Synaptics Fingerprint Driver versions prior to 6.0.64.1105 Description: The issue is related to a missing lock check in SynHsaService, which may create a use-after-free condition,...

5.5CVSS7.2AI score0.00156EPSS
SaveExploits0References3
NVD
NVD
•added 2024/04/05 9:15 p.m.•22 views

CVE-2024-23592

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

6.3CVSS6.3AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/05 8:46 p.m.•38 views

CVE-2024-23592

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

6.3CVSS6.5AI score0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/05 8:46 p.m.•19 views

CVE-2024-23592

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

6.3CVSS7AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/05 8:46 p.m.•100 views

CVE-2024-23592

CVE-2024-23592 describes an authentication bypass in Lenovo devices equipped with Synaptics fingerprint readers, enabling an attacker with physical access to replay fingerprints and bypass Windows Hello authentication. The vulnerability arises in the fingerprint authentication mechanism and could...

6.3CVSS6.8AI score0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/05 12:00 a.m.•12 views

PT-2024-19953 · Synaptics +2 · Synaptics Fingerprint Readers +2

Name of the Vulnerable Software and Affected Versions: Lenovo devices with Synaptics fingerprint readers affected versions not specified Description: An authentication bypass issue was reported in Lenovo devices with Synaptics fingerprint readers. This could allow an attacker with physical access...

6.3CVSS7AI score0.0025EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/05 12:00 a.m.•3 views

CVE-2024-23592: Improperly Implemented Security Check for Standard

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

6.3CVSS5.8AI score0.0025EPSS
SaveExploits0References2
Lenovo
Lenovo
•added 2024/03/12 4:32 p.m.•15 views

Fingerprint Reader Vulnerabilities - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Rows per page
Query Builder