Azure Linux 3.0 Security Update: kernel (CVE-2024-56739)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56739 advisory. - In the Linux kernel, the following vulnerability has been resolved: rtc: check if rtcreadtime was successful...

Linux Distros Unpatched Vulnerability : CVE-2024-26641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: make sure to pull inner header in ip6tnlrcv syzbot found ip6tnlrcv could access...

Linux Distros Unpatched Vulnerability : CVE-2022-24448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the ODIRECTORY flag, and tries to open a regular file,...

Linux Distros Unpatched Vulnerability : CVE-2018-16323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affecte...

Linux Distros Unpatched Vulnerability : CVE-2019-13751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory vi...

ASB-A-347735428

In dnglosslessdecoder::HuffDecode of dnglosslessjpeg.cpp, there is a possible way to cause a crash due to uninitialized data. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-380395346

In hidallocreportbuf of hid-core.c, there is a possible leak of kernel memory contents to a USB HID due to uninitialized data. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2022-49301

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in usbread8 and friends When r8712usbctrlvendorreq returns negative, 'data' in usbread8,16,32 will not be initialized. BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:643 inline BUG:...

CVE-2024-57997 wifi: wcn36xx: fix channel survey memory allocation size

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn-chansurvey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn-chansurvey, ensuring prope...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from driver data not being set when vmclockptpregister fails, resulting in uninitialized data being accessed duri...

DEBIAN-CVE-2022-49301

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in usbread8 and friends When r8712usbctrlvendorreq returns negative, 'data' in usbread8,16,32 will not be initialized. BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:643 inline BUG:...

UBUNTU-CVE-2022-49301

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in usbread8 and friends When r8712usbctrlvendorreq returns negative, 'data' in usbread8,16,32 will not be initialized. BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:643 inline BUG:...

CVE-2022-49301 staging: rtl8712: fix uninit-value in usb_read8() and friends

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in usbread8 and friends When r8712usbctrlvendorreq returns negative, 'data' in usbread8,16,32 will not be initialized. BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:643 inline BUG:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a usb read error not being handled correctly in the asix driver, which could result in uninitialized values...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Do not pass a stopped vif to the driver in .gettxpower. Avoid potentially crashing the driver due to uninitialized private data...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42225)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42225 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skbput with skbputze...

CVE-2025-20638

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2025-20638

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2025-20638

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2025-20638

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...