48 matches found
UBUNTU-CVE-2022-49980
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free Read in usbudcuevent The syzbot fuzzer found a race between uevent callbacks and gadget driver unregistration that can cause a use-after-free bug:...
PT-2025-25797
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel, specifically in the RDMA/core component. The problem arises when the function ib device rename renames a device name with...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Driver core: Fixed a potential NULL pointer dereferencing in devuevent. If the user space reads the “uevent” device attribute at the same time as other threads unbinds the device from its driver, changing the value of dev-driver...
kernel: driver core: Fix uevent_show() vs driver detach race
No description is available for this CVE...
AZL-63788 CVE-2025-37800 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev-driver from a valid pointer to NU...
UBUNTU-CVE-2025-37800
In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev-driver from a valid pointer to NU...
CVE-2025-37800 driver core: fix potential NULL pointer dereference in dev_uevent()
In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev-driver from a valid pointer to NU...
PT-2025-20329
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential NULL pointer dereference in the dev uevent function has been resolved. This issue occurs when userspace reads the "uevent" device attribute at the same time as another thread...
kernel: kobject_uevent: Fix OOB access within zap_modalias_env()
in linux kernel's kobjectuevent, zapmodaliasenv incorrectly calculates the size of the memory block to move, which may cause out of bounds memory access...
SUSE CVE-2025-23131
In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...
The vulnerability of the i3c_device_uevent() function in the drivers/i3c/master.c file of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the i3cdeviceuevent function in the drivers/i3c/master.c file of the Linux kernel leads to a mutual locking mechanism being enabled. Exploiting this vulnerability could allow an attacker to trigger a service failure...
kernel: kobject_uevent: Fix OOB access within zap_modalias_env()
in linux kernel's kobjectuevent, zapmodaliasenv incorrectly calculates the size of the memory block to move, which may cause out of bounds memory access...
OESA-2025-1111 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev-desc-info instead of calling i3cdevicegetinfo to avoid deadlock A deadlock may happen since the i3cmasterregister acquires &i3cbus-lock twice. Se...
PT-2025-16771
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the dlm component, where writing a positive value to event done could lead to a NULL pointer dereference...
The vulnerability of the Linux operating system’s kernel component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s kernel component is related to incorrect blocking in the ueventshow function. Exploiting this vulnerability can allow an attacker to cause a service failure...
CLSA-2024-1731602566 Fix of 76 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-44946 - kcm: Serialise kcmsendmsg for the same socket. CVE-url: https://ubuntu.com/security/CVE-2024-42292 - kobjectuevent: Fix OOB access within zapmodaliasenv CVE-url: https://ubuntu.com/security/CVE-2024-41042 - netfilter: nftables: prefer...
OESA-2024-2294 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6init is wrong in case CONFIGIPV6SEG6LWTUNNEL is not defined. In that case if seg6hmacinit fails...
kernel: drivers: core: synchronize really_probe() and dev_uevent()
This CVE has been marked as Rejected by the assigning CNA...
SUSE CVE-2024-42292
In the Linux kernel, the following vulnerability has been resolved: kobjectuevent: Fix OOB access within zapmodaliasenv zapmodaliasenv wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed b...
DEBIAN-CVE-2024-42292
In the Linux kernel, the following vulnerability has been resolved: kobjectuevent: Fix OOB access within zapmodaliasenv zapmodaliasenv wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed b...