CVE-2024-47664 spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware

In the Linux kernel, the following vulnerability has been resolved: spi: hisi-kunpeng: Add verification for the maxfrequency provided by the firmware If the value of maxspeedhz is 0, it may cause a division by zero error in hisicalceffectivespeed. The value of maxspeedhz is provided by firmware...

CVE-2024-47664

In the Linux kernel, the following vulnerability has been resolved: spi: hisi-kunpeng: Add verification for the maxfrequency provided by the firmware If the value of maxspeedhz is 0, it may cause a division by zero error in hisicalceffectivespeed. The value of maxspeedhz is provided by firmware...

The vulnerability of the lcd2s component in the Linux operating system’s kernel, related to a memory release error, allows for a malfunction that can lead to service failure.

The vulnerability of the lcd2s component in the Linux operating system’s kernel is related to a memory release error. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the lcd2s component in the Linux operating system’s kernel, related to the operation of writing data beyond the buffer boundaries, can lead to a failure in service.

The vulnerability of the lcd2s component in the Linux operating system’s kernel is related to the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the kvm_set_cpuid function in the include/linux/slab.h library of the KVM virtualization subsystem in the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the kvmsetcpuid function in the include/linux/slab.h library of the KVM virtualization subsystem in the Linux kernel is related to improper release of the kvmcpuidentry2 array. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the flower component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the flower kernel component in the Linux operating system is related to a memory leak in the nfptunneladdsharedmac function. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the vm_area_alloc_pages() function in the Linux kernel memory manager allows a hacker to trigger a service failure.

The vulnerability of the vmareaallocpages function in the Linux kernel’s memory manager is related to incorrect parameter checking. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of embedded software developed by Qualcomm, related to operations that occur outside of the buffer in memory, allows attackers to disclose protected information or cause system failures.

The vulnerability of embedded Qualcomm software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause system failures...

The vulnerability of the Foxboro.sys driver, a microprogramming software for distributed system management, allows a attacker to cause a service failure.

The vulnerability of the Foxboro.sys driver, a microprogramming software for distributed control systems like EcoStruxureTM Foxboro DCS Control Core Services, is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of the e1000e component of the QEMU server, which allows a hacker to trigger a service failure

The vulnerability of the e1000e component of the QEMU server is related to repeated DMA input. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the tiff.c file in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the tiff.c file in the console-based graphic editor ImageMagick is related to buffer overflow in the heap. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the scp_ipi_init() function in the kernel subsystem driver of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the scpipiinit function in the drivers/remoteproc/mtkscp.c file of the Linux kernel’s processor driver relates to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the thermaldebug_tzremove() function, a temperature sensor in the Linux kernel, allows a malicious actor to cause a service failure.

The vulnerability of the thermaldebugtzremove function in the drivers/thermal/thermaldebugfs.c file of the Linux kernel’s temperature sensor module is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the NVIDIA GPU Display Driver software driver allows a hacker to trigger a service failure.

The vulnerability of the NVIDIA GPU Display Driver software driver is related to the assignment of a zero pointer. Exploiting this vulnerability allows an attacker to cause a system failure...

The vulnerability of the bnx2x_tpa_stop() function in the drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c module of the Linux kernel’s BPF component allows a hacker to cause a service failure.

The vulnerability of the bnx2xtpastop function in the drivers/net/ethernet/broadcom/bnx2x/bnx2xcmn.c module of the Linux kernel’s BPF component is related to a memory leak. Exploiting this vulnerability allows an attacker to cause a system failure...

The vulnerability of the test_fentry() function in the tools/testing/selftests/bpf/prog_tests/tracing_struct.c module of the Linux kernel’s bpf component allows a hacker to induce a system failure.

The vulnerability of the testfentry function in the tools/testing/selftests/bpf/progtests/tracingstruct.c module of the bpf component of the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the pfn_valid() function in the include/linux/mmzone.h module of the Linux kernel’s memory management subsystem allows a attacker to cause a service failure.

The vulnerability of the pfnvalid function in the include/linux/mmzone.h module of the Linux memory management subsystem is related to an infinite recursion. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the i2c_hid_of_probe() function in the HID driver for I2C devices in Linux kernels allows a hacker to cause a service failure.

The vulnerability of the i2chidofprobe function in the drivers/hid/i2c-hid/i2c-hid-of.c file of the HID device driver for I2C devices in the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mt7925pciremove() function in the drivers/net/wireless/mediatek/mt76/mt7925/pci.c file of the MediaTek MT7925E (PCIe) Linux kernel driver allows a hacker to cause a service failure.

The vulnerability of the mt7925pciremove function in the drivers/net/wireless/mediatek/mt76/mt7925/pci.c file of the MediaTek MT7925E PCIe Linux kernel driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failur...

The vulnerability of the UEFI loader’s shim, related to reading beyond the field, allows a hacker to trigger a system failure.

The vulnerability of the UEFI loader “shim” is related to errors in reading beyond the boundary, due to the lack of proper boundary checking during the loading of the binary PE file. Exploiting this vulnerability can allow an attacker to cause a system failure...