CVE-2023-52577 dccp: fix dccp_v4_err()/dccp_v6_err() again

In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccpv4err/dccpv6err again dh-dccphx is the 9th byte offset 8 in "struct dccphdr", not in the "byte 7" as Jann claimed. We need to make sure the ICMP messages are big enough, using more standard ways no more assumptions...

CVE-2023-52577

In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccpv4err/dccpv6err again dh-dccphx is the 9th byte offset 8 in "struct dccphdr", not in the "byte 7" as Jann claimed. We need to make sure the ICMP messages are big enough, using more standard ways no more assumptions...

CVE-2023-52577 dccp: fix dccp_v4_err()/dccp_v6_err() again

In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccpv4err/dccpv6err again dh-dccphx is the 9th byte offset 8 in "struct dccphdr", not in the "byte 7" as Jann claimed. We need to make sure the ICMP messages are big enough, using more standard ways no more assumptions...

CVE-2023-52528 net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: uninit-value in smsc75xxwaitready...

CVE-2023-52528 net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: uninit-value in smsc75xxwaitready...

PT-2024-7724 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the netlink component of the Linux kernel, where the validation code reads past a malformed attribute due to a missing size in the minlen array for NLA BE32. Th...

PT-2023-9741

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc3 Description The issue is related to the virtio/vsock component of the Linux kernel. It occurs because the buf alloc and fwd cnt fields of the struct virtio vsock hdr are not initialized when a new skb i...

PT-2023-9464

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.8.0 Description The issue is caused by the usbnet read cmd function reading less bytes than requested, resulting in the buf variable not being properly filled. This can lead to an uninit-value access issue in t...

GSD-2022-1007365 usb: idmouse: fix an uninit-value in idmouse_open

usb: idmouse: fix an uninit-value in idmouseopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007211 usb: idmouse: fix an uninit-value in idmouse_open

usb: idmouse: fix an uninit-value in idmouseopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

GSD-2022-1007000 usb: idmouse: fix an uninit-value in idmouse_open

usb: idmouse: fix an uninit-value in idmouseopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006715 usb: idmouse: fix an uninit-value in idmouse_open

usb: idmouse: fix an uninit-value in idmouseopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

PT-2022-35620

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.220 Description The issue is related to an uninit-value in the idmouse open function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-35737

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.262 Description The issue is related to an uninit-value in the idmouse open function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

GSD-2022-1004768 mm/mempolicy: fix uninit-value in mpol_rebind_policy()

mm/mempolicy: fix uninit-value in mpolrebindpolicy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

PT-2022-33109

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.290 Description The issue is related to an uninit-value in the mpol rebind policy function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-33030

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254 Description The issue is related to an uninit-value in the mpol rebind policy function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-32587

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue is related to an uninit-value in the mpol rebind policy function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-32361

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue is related to an uninit-value in the mpol rebind policy function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-33166

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.325 Description The issue is related to an uninit-value in the mpol rebind policy function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...