4383 matches found
Tenda AC8 security vulnerabilities
Tenda AC8 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC8 version 16.03.34.06, which originates from the parameter rebootTime of the function formSetRebootTimer in the file /goform/SetSysAutoRebbotCfg, which can lead to a stack-based buffer overflow...
PT-2024-33933
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A problem in the Linux kernel has been resolved, related to the dummy-hcd driver. The issue was caused by a difference between the timer pending and hrtimer active APIs, which led to...
tracing/timerlat: Only clear timer if a kthread exists
...
fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
...
kernel: watchdog: Fix possible use-after-free by calling del_timer_sync()
A vulnerability was found in the deltimer function in the Linux kernel's watchdog driver. This issue occurs because the function does not wait for the timer handler to finish, which may lead to a situation where the handler runs after the driver that has been removed, causing a use-after-free iss...
TP-LINK TL-WDR7660 security vulnerabilities
TP-LINK TL-WDR7660 is a gigabit router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WDR7660 version 1.0, which stems from the wlanTimerRuleJsonToBin function not checking the parameter string name when processing it, which could lead to a stack overflow...
PT-2024-33987
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A use-after-free vulnerability was reported in the Linux kernel's TCP timer handling. The issue occurs when the req-sk is closed before the timer expiration, which is 63 seconds by default...
CLSA-2024-1728936982 kernel: Fix of 86 CVEs
drm/amd/pm: Fix negative array index read CVE-2024-46821 - drm/amd/display: Check gpioid before used as array index CVE-2024-46818 - drm/amd/display: Check linkindex before accessing dc-links CVE-2024-46813 - drm/amd/display: Fix index may exceed array range within fpuupdatebwboundingbox...
MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
...
Unspecified vulnerability in Linux kernel (CNVD-2024-40279)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle timers when handling timer interrupts. No details of the vulnerability are...
SUSE CVE-2024-46832
In the Linux kernel, the following vulnerability has been resolved: MIPS: cevt-r4k: Don't call getc0compareint if timer irq is installed This avoids warning: 0.118053 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:283 Caused by getc0compareint on secondary CPU. We al...
SUSE CVE-2024-46858
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in timerdeletesync There are two paths to access mptcppmdeladdtimer, result in a race condition: CPU1 CPU2 ==== ==== netrxaction napipoll netlinksendmsg napipoll netlinkunicast processbacklog netlinkunicastkern...
CVE-2024-46832
In the Linux kernel, the following vulnerability has been resolved: MIPS: cevt-r4k: Don't call getc0compareint if timer irq is installed This avoids warning: 0.118053 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:283 Caused by getc0compareint on secondary CPU. We al...
DEBIAN-CVE-2024-46858
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in timerdeletesync There are two paths to access mptcppmdeladdtimer, result in a race condition: CPU1 CPU2 ==== ==== netrxaction napipoll netlinksendmsg napipoll netlinkunicast processbacklog netlinkunicastkern...
CVE-2024-46858
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in timerdeletesync There are two paths to access mptcppmdeladdtimer, result in a race condition: CPU1 CPU2 ==== ==== netrxaction napipoll netlinksendmsg napipoll netlinkunicast processbacklog netlinkunicastkern...
AZL-49785 CVE-2024-46858 affecting package kernel for versions less than 6.6.56.1-5
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in timerdeletesync There are two paths to access mptcppmdeladdtimer, result in a race condition: CPU1 CPU2 ==== ==== netrxaction napipoll netlinksendmsg napipoll netlinkunicast processbacklog netlinkunicastkern...
UBUNTU-CVE-2024-46832
In the Linux kernel, the following vulnerability has been resolved: MIPS: cevt-r4k: Don't call getc0compareint if timer irq is installed This avoids warning: 0.118053 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:283 Caused by getc0compareint on secondary CPU. We al...
UBUNTU-CVE-2024-46858
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in timerdeletesync There are two paths to access mptcppmdeladdtimer, result in a race condition: CPU1 CPU2 ==== ==== netrxaction napipoll netlinksendmsg napipoll netlinkunicast processbacklog netlinkunicastkern...
CVE-2024-46858
CVE-2024-46858 in the Linux kernel fixes a local UAF race in mptcp_pm_del_add_timer. Two paths can access mptcp_pm_del_add_timer concurrently (CPU1 in PM code path vs CPU2 in netlink/ip stack path), leading to use-after-free when a timer entry is freed after leaving the critical region. The patch...
CVE-2024-46845
CVE-2024-46845 (Linux kernel): The timerlat use-after-free occurs when a SIGTERM kills user-space tracing threads, causing an hrtimer to be freed twice during thread shutdown. The documented fix cancels the hrtimer only if the associated thread still exists and adds an interface_lock around tlat_...