513 matches found
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: netdevsim: A trailing zero was added to terminate the string in nsimnexthopbucketactivitywrite. This issue was identified by a static analyzer. We should not forget the trailing zero after copyfromuser if we will perform further...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: vpvdpa: fixed the issue where the idtable array was not terminated with a null terminator. Also, an additional virtiodeviceid was allocated as a null terminator. Otherwise, vdpamgmtdevgetclasses might iterate multiple times an...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Use strnlen on name fields in V1 wmfw files. Use strnlen instead of strlen for the algorithm and coefficient name string arrays in V1 wmfw files. In V1 wmfw files, the name is a NUL-terminated string stored in a...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Tracing: Consider the NULL character when validating the event length. strlen returns the length of a string excluding the null byte. If the string length equals the maximum buffer length, there will be no space left in the buffe...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use strscpy instead of strlcpy current-comm is not a string no guarantee for a zero byte in it. strlcpys1, s2, l is calling strlens2, potentially causing out-of-bound access, as reported by syzbot: detected buffer...
SUSE CVE-2024-57880
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...
CVE-2024-57880
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...
CVE-2024-57880
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...
DEBIAN-CVE-2024-57880
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...
UBUNTU-CVE-2024-57880
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...
CVE-2024-57880 ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...
CVE-2024-57880
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...
CVE-2024-57880 ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...
CVE-2024-53110
In the Linux kernel, the following vulnerability has been resolved: vpvdpa: fix idtable array not null terminated error Allocate one extra virtiodeviceid as null terminator, otherwise vdpamgmtdevgetclasses may iterate multiple times and visit undefined memory...
DEBIAN-CVE-2024-53110
In the Linux kernel, the following vulnerability has been resolved: vpvdpa: fix idtable array not null terminated error Allocate one extra virtiodeviceid as null terminator, otherwise vdpamgmtdevgetclasses may iterate multiple times and visit undefined memory...
AZL-54153 CVE-2024-53110 affecting package kernel for versions less than 6.6.64.2-1
In the Linux kernel, the following vulnerability has been resolved: vpvdpa: fix idtable array not null terminated error Allocate one extra virtiodeviceid as null terminator, otherwise vdpamgmtdevgetclasses may iterate multiple times and visit undefined memory...
CVE-2024-53110 vp_vdpa: fix id_table array not null terminated error
In the Linux kernel, the following vulnerability has been resolved: vpvdpa: fix idtable array not null terminated error Allocate one extra virtiodeviceid as null terminator, otherwise vdpamgmtdevgetclasses may iterate multiple times and visit undefined memory...
CVE-2024-53110 vp_vdpa: fix id_table array not null terminated error
In the Linux kernel, the following vulnerability has been resolved: vpvdpa: fix idtable array not null terminated error Allocate one extra virtiodeviceid as null terminator, otherwise vdpamgmtdevgetclasses may iterate multiple times and visit undefined memory...
CVE-2024-53110
The CVE-2024-53110 issue affects the Linux kernel vp_vdpa component, where the id_table array wasn’t terminated with a null terminator. This could cause vdpa_mgmtdev_get_classes() to iterate multiple times and access undefined memory. The fix adds one extra virtio_device_id as a null terminator t...