4392 matches found
Malicious Package
Overview site-speed-above-the-fold-timer is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...
PT-2023-34363
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a use-after-free UAF error in the run timer softirq function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2023-34009
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to a use-after-free UAF error in the run timer softirq function. This problem was introduced in version v3.2 and is fixed in Linux Kernel version v5.15.87. The actual...
PT-2023-34614
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to a use-after-free UAF bug in the run timer softirq function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel...
PT-2023-33176 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a math error in the XGene-1 TVAL register in the arm arch timer driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
Brave Android 1.47.172 Security Fixes
Improved browser privacy by reducing high resolution timer precision as reported on HackerOne by joe12387. - Improved URL bar by always displaying eTLD+1 URLs. Upgraded Chromium to 109.0.5414.87 — refer to Google Chrome advisories for inherited CVEs...
CVE-2022-43662
Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernelliteosa has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked...
Unbreakable Enterprise kernel security update
4.14.35-2047.521.4 - tcp: Tunables for TCP delayed ack min and max timers Venkat Venkatsubra Orabug: 34883100 4.14.35-2047.521.3 - Revert 'random: use expired timer rather than wq for mixing fast pool' Saeed Mirzamohammadi Orabug: 34918228 4.14.35-2047.521.2 - RDS/IB: Fix the misplaced counter...
PT-2025-37659
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a process waiting for an rxrpc call could be interrupted, leading to subsequent sendmsg calls failing with an EBUSY error until an assignment is...
PT-2025-54133
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.1+g56321e101aca 1 Description The Linux kernel contains a flaw related to interrupt request handling in the tty serial driver for the imx platform. Specifically, pending USR interrupts may occur before the UA...
PT-2025-37505
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mmc add host function may return an error, and ignoring this return value can lead to a memory leak. This memory leak occurs because memory allocated in mmc alloc host is not freed,...
PT-2025-43073
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free condition within the dm thin subsystem, specifically in the run timer softirq function. This issue arises when dm resume and dm destroy...
PT-2025-53961
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue was identified and resolved in the Linux kernel related to dm clone functionality within the clone dtr function. The issue also exists when dm resume and dm...
PT-2025-40730
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue was identified and resolved in the dm cache functionality of the Linux kernel. This problem occurs when dm resume and dm destroy are executed concurrently. The...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
Linux net/rose/rose_timer.c DoS
The vulnerability of the net/rose/rosetimer.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability allows an attacker to cause a service failure...
kernel: KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
A vulnerability was found in the Linux kernel's KVM component related to the LAPIC during the guest reboot process. This issue arises when the SETLAPIC command is issued without exposing the tsc-deadline mode, leading to warnings and potential inconsistencies due to an unhandled preemption timer...
kernel: ath11k: fix netdev open race
In the Linux kernel, the following vulnerability has been resolved: ath11k: fix netdev open race Make sure to allocate resources needed before registering the device. This specifically avoids having a racing open trigger a BUGON in modtimer when ath11kmacopstart is called before the monreaptimer ...
kernel: posix-cpu-timers: Cleanup CPU timers before freeing them during exec
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Cleanup CPU timers before freeing them during exec Commit 55e8c8eb2c7b "posix-cpu-timers: Store a reference to a pid not a task" started looking up tasks by PID when deleting a CPU timer. When a non-leader threa...
GSD-2022-1007663 mISDN: fix use-after-free bugs in l1oip timer handlers
mISDN: fix use-after-free bugs in l1oip timer handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...