Lucene search
+L

2127 matches found

OSV
OSV
added 2024/10/21 6:15 p.m.11 views

DEBIAN-CVE-2024-49925

In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can register and cleanup sysfs groups already. Make use of that functionality to simplify the error handling and cleanup. Also avoid a UAF race during...

5.5CVSS5.7AI score0.00273EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 6:15 p.m.10 views

UBUNTU-CVE-2024-49941

In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix potential NULL pointer dereference in gpiodgetlabel In gpiodgetlabel, it is possible that srcudereferencecheck may return a NULL pointer, leading to a scenario where label-str is accessed without verifying if label...

5.5CVSS5.7AI score0.00202EPSS
SaveExploits0References8
OSV
OSV
added 2024/10/21 6:15 p.m.13 views

UBUNTU-CVE-2024-49925

In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can register and cleanup sysfs groups already. Make use of that functionality to simplify the error handling and cleanup. Also avoid a UAF race during...

7.1CVSS6.2AI score0.00273EPSS
SaveExploits0References48
OSV
OSV
added 2024/10/21 6:2 p.m.23 views

CVE-2024-49941 gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()

In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix potential NULL pointer dereference in gpiodgetlabel In gpiodgetlabel, it is possible that srcudereferencecheck may return a NULL pointer, leading to a scenario where label-str is accessed without verifying if label...

6AI score
SaveExploits0References5
Cvelist
Cvelist
added 2024/10/21 6:2 p.m.32 views

CVE-2024-49941 gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()

In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix potential NULL pointer dereference in gpiodgetlabel In gpiodgetlabel, it is possible that srcudereferencecheck may return a NULL pointer, leading to a scenario where label-str is accessed without verifying if label...

0.00202EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/10/21 6:1 p.m.34 views

CVE-2024-49925 fbdev: efifb: Register sysfs groups through driver core

In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can register and cleanup sysfs groups already. Make use of that functionality to simplify the error handling and cleanup. Also avoid a UAF race during...

7.1CVSS0.00273EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2024/10/21 6:1 p.m.14 views

CVE-2024-49925 fbdev: efifb: Register sysfs groups through driver core

In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can register and cleanup sysfs groups already. Make use of that functionality to simplify the error handling and cleanup. Also avoid a UAF race during...

6.9AI score0.00273EPSS
SaveExploits0References6
OSV
OSV
added 2024/10/21 6:1 p.m.24 views

CVE-2024-49925 fbdev: efifb: Register sysfs groups through driver core

In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can register and cleanup sysfs groups already. Make use of that functionality to simplify the error handling and cleanup. Also avoid a UAF race during...

7.1CVSS6.2AI score
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2024/10/21 3:45 p.m.6 views

SUSE CVE-2024-49860

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.8CVSS6.5AI score0.00254EPSS
SaveExploits0References42
RedhatCVE
RedhatCVE
added 2024/10/21 2:42 p.m.21 views

CVE-2024-49860

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.1CVSS7.3AI score0.00254EPSS
SaveExploits0References4
OSV
OSV
added 2024/10/21 1:15 p.m.26 views

AZL-50833 CVE-2024-49860 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.1CVSS6.8AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 1:15 p.m.18 views

AZL-51017 CVE-2024-49860 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.1CVSS6.8AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 1:15 p.m.6 views

DEBIAN-CVE-2024-49860

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.1CVSS6.3AI score0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/21 12:27 p.m.14 views

CVE-2024-49860 ACPI: sysfs: validate return type of _STR method

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.2AI score0.00254EPSS
SaveExploits0References9
CVE
CVE
added 2024/10/21 12:27 p.m.205 views

CVE-2024-49860

CVE-2024-49860 relates to the Linux kernel ACPI subsystem, specifically the sysfs path and the _STR method. The vulnerability arises when the _STR method returns a value that is not a buffer object; only buffers are valid, and returning other data types can cause description_show() to access inva...

7.3CVSS8AI score0.00254EPSS
SaveExploits0References11Affected Software1
Cvelist
Cvelist
added 2024/10/21 12:27 p.m.25 views

CVE-2024-49860 ACPI: sysfs: validate return type of _STR method

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.3CVSS0.00254EPSS
SaveExploits0References9
OSV
OSV
added 2024/10/21 12:27 p.m.19 views

CVE-2024-49860 ACPI: sysfs: validate return type of _STR method

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.3CVSS6.5AI score
SaveExploits0References14
Debian CVE
Debian CVE
added 2024/10/21 12:27 p.m.21 views

CVE-2024-49860

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.3CVSS6.3AI score0.00254EPSS
SaveExploits0
OSV
OSV
added 2024/10/21 12:15 p.m.2 views

DEBIAN-CVE-2024-47688

In the Linux kernel, the following vulnerability has been resolved: driver core: Fix a potential null-ptr-deref in moduleadddriver Inject fault while probing of-fpga-region, if kasprintf fails in moduleadddriver, the second sysfsremovelink in exit path will cause null-ptr-deref as below because...

5.5CVSS6AI score0.00235EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/21 12:0 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a potential post-release reuse issue with the fbdev component efifb when registered with the sysfs group...

5.5CVSS6.6AI score0.00273EPSS
SaveExploits0References6
Rows per page
Query Builder