PT-2022-7490 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a race condition in the configfs component of the Linux kernel. When configfs register subsystem or configfs unregister subsystem is executing link grou...

CVE-2022-0646

A flaw use after free in the Linux kernel Management Component Transport Protocol MCTP subsystem was found in the way user triggers cancelworksync after the unregisternetdev during removing device. A local user could use this flaw to crash the system or escalate their privileges on the system. It...

CVE-2022-0646

A flaw use after free in the Linux kernel Management Component Transport Protocol MCTP subsystem was found in the way user triggers cancelworksync after the unregisternetdev during removing device. A local user could use this flaw to crash the system or escalate their privileges on the system. It...

PT-2022-28507

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue concerns offload support for the NETDEV UNREGISTER event in the net: macsec module. It was introduced in version v5.6 and fixed in version v5.10.99. The actual impact and attack...

PT-2022-12613

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description An untrusted pointer dereference issue exists via the function gf node unregister at scenegraph/base scenegraph.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...

PT-2022-12611

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description A NULL pointer dereference issue exists via the function gf node unregister at scenegraph/base scenegraph.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...

PT-2025-8124

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel, specifically in the remove phb dynamic function. This issue occurs when the device unregister function is called,...

PT-2025-8064

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel's Bluetooth handling has been identified, specifically in the hci sync function. The problem occurs when the HCI UNREGISTER flag is set, which indicates that...

PT-2021-27245

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.295 Description The issue is related to the hamradio component, specifically the ax25 protocol, where a potential security vulnerability may exist due to a kfree operation being deferred after unregister...

PT-2021-27313

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.12 Description: A potential security issue exists in the hamradio component of the Linux Kernel, related to the defer ax25 kfree after unregister netdev. The actual impact and attack plausibility have not...

PT-2021-27250

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.260 Description The issue is related to the hamradio component, specifically the ax25 protocol, where a potential security vulnerability may exist due to a kfree operation being deferred after unregister...

CVE-2021-24943

The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the eventid in the rtecsendunregisterlink AJAX action available to both unauthenticated and authenticated users before using it in a SQL statement, leading to an unauthenticated SQL injection...

CVE-2021-24943

The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the eventid in the rtecsendunregisterlink AJAX action available to both unauthenticated and authenticated users before using it in a SQL statement, leading to an unauthenticated SQL injection...

PT-2021-16379

Name of the Vulnerable Software and Affected Versions: Registrations for the Events Calendar WordPress plugin versions prior to 2.7.6 Description: The issue arises from the lack of sanitization and escaping of the event id in the /wp-admin/admin-ajax.php 'rtec send unregister link' AJAX action,...

UVI-2021-1002350 clk: sunxi-ng: Unregister clocks/resets when unbinding

clk: sunxi-ng: Unregister clocks/resets when unbinding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

PT-2021-8180 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free error in the Linux kernel's sched/fair component. This error occurs when the unregister fair sched group function unlinks all cfs rqs from a...

kernel: use-after-free in function hci_sock_bound_ioctl()

A flaw use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hciunregisterdev together with one of the calls hcisockblacklistadd, hcisockblacklistdel, hcigetconninfo,...

kernel: memory leak upon a kmalloc failure in kvm_io_bus_unregister_dev function in virt/kvm/kvm_main.c

A flaw was found in the KVM hypervisor of the Linux kernel. A memory leak could occur in kvmiobusunregisterdev upon a kmalloc failure. The highest threat from this vulnerability is to system availability...

kernel: use-after-free in function hci_sock_bound_ioctl()

A flaw use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hciunregisterdev together with one of the calls hcisockblacklistadd, hcisockblacklistdel, hcigetconninfo,...

Registrations for the Events Calendar < 2.7.6 - Unauthenticated SQL Injection

The plugin does not sanitise and escape the eventid in the rtecsendunregisterlink AJAX action available to both unauthenticated and authenticated users before using it in a SQL statement, leading to an unauthenticated SQL injection. The below request will send an email to [email protected] wi...