756 matches found
CVE-2024-53058
The CVE-2024-53058 issue is a Linux kernel vulnerability in the net/stmmac driver (TSO path) where non-paged SKB data could trigger unbalanced DMA map/unmap operations when DMA AXI width is 40/48-bit or when non-paged data exceeds TSO_MAX_BUFF_SIZE on 32-bit AXI width. The root cause is an incorr...
kernel: nvme-pci: add missing condition check for existence of mapped data
nvme-pci in linux kernel does not call nvmeunmapdata for the same instances of nvmemapdata, which can lead to incorrect dereferencing...
DEBIAN-CVE-2024-50145
In the Linux kernel, the following vulnerability has been resolved: octeonep: Add SKB allocation failures handling in octepoqprocessrx buildskb returns NULL in case of a memory allocation failure so handle it inside octepoqprocessrx to avoid NULL pointer dereference. octepoqprocessrx is called...
kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets.
in linux kernel r8169, when transmitting small fragmented packets, invalid entries were inserted into the transmit ring buffer, leading to calls to dmaunmapsingle with a null address...
kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets.
in linux kernel r8169, when transmitting small fragmented packets, invalid entries were inserted into the transmit ring buffer, leading to calls to dmaunmapsingle with a null address...
CVE-2024-33033
CVE-2024-33033 is a memory corruption issue arising during IOCTL processing to unmap buffers in Qualcomm chipsets. Affected component is not explicitly named beyond “unmap the buffers” in IOCTL paths; the entry indicates local attack vector with low complexity and requires low privileges, with no...
CVE-2024-33033 Use After Free in ComputerVision
Memory corruption while processing IOCTL calls to unmap the buffers...
CVE-2024-33033 Use After Free in ComputerVision
Memory corruption while processing IOCTL calls to unmap the buffers...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when processing an IOCTL call to unmap a buffer...
AZL-51986 CVE-2024-50001 affecting package kernel for versions less than 5.15.173.1-1
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA mapping was established The multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This could fail, e.g. under...
UBUNTU-CVE-2024-50001
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA mapping was established The multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This could fail, e.g. under...
kernel: powerpc/fixmap: Fix VM debug warning on unmap
In the Linux kernel, the following vulnerability has been resolved: powerpc/fixmap: Fix VM debug warning on unmap Unmapping a fixmap entry is done by calling setfixmap with FIXMAPPAGECLEAR as flags. Today, powerpc setfixmap calls mapkernelpage. mapkernelpage is not happy when called a second time...
AZL-60151 CVE-2024-8612 affecting package qemu 6.2.0-26
A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueuepush as set in virtioscsicompletereq / virtioblkreqcomplete / viritocryptoreqcomplete could be larger than the true size of the data which has been sent to guest. Once virtqueuepush finally...
UBUNTU-CVE-2024-8612
A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueuepush as set in virtioscsicompletereq / virtioblkreqcomplete / viritocryptoreqcomplete could be larger than the true size of the data which has been sent to guest. Once virtqueuepush finally...
CVE-2024-8612
A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueuepush as set in virtioscsicompletereq / virtioblkreqcomplete / viritocryptoreqcomplete could be larger than the true size of the data which has been sent to guest. Once virtqueuepush finally...
SUSE CVE-2024-46741
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix double free of 'buf' in error path smatch warning: drivers/misc/fastrpc.c:1926 fastrpcreqmmap error: double free of 'buf' In fastrpcreqmmap error path, the fastrpc buffer is freed in fastrpcreqmunmapimpl if unm...
DEBIAN-CVE-2024-46741
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix double free of 'buf' in error path smatch warning: drivers/misc/fastrpc.c:1926 fastrpcreqmmap error: double free of 'buf' In fastrpcreqmmap error path, the fastrpc buffer is freed in fastrpcreqmunmapimpl if unm...
virtio: packed: fix unmap leak for indirect desc table
...
drm/vmwgfx: Unmap the surface before resetting it on a plane state
...
kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets.
in linux kernel r8169, when transmitting small fragmented packets, invalid entries were inserted into the transmit ring buffer, leading to calls to dmaunmapsingle with a null address...