251428 matches found
The vulnerability of the i2c_imx_master_isr() function in the drivers/i2c/busses/i2c-imx.c module of the I2C driver for the Linux operating system’s hardware bus allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the i2cimxmasterisr function in the drivers/i2c/busses/i2c-imx.c module of the I2C driver for the Linux operating system is related to the use of a pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
The vulnerability of the `squashfs_readmetadata()` function in the `fs/squashfs/cache.c` file of the Squashfs file system module in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the squashfsreadmetadata function in the fs/squashfs/cache.c file of the Squashfs file system in the Linux kernel is related to an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker to compromise...
The vulnerability of the fib6_nh_init() function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the fib6nhinit function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the find_sdca_entity_iot() function in the sound/soc/sdca/sdca_functions.c module of the Linux kernel’s audio subsystem allows a hacker to cause a service failure.
The vulnerability of the findsdcaentityiot function in the sound/soc/sdca/sdcafunctions.c module of the Linux kernel’s audio subsystem is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the vmw_kms_fb_create() function in the drivers/gpu/drm/vmwgfx/vmwgfx_kms.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the vmwkmsfbcreate function in the drivers/gpu/drm/vmwgfx/vmwgfxkms.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux kernel, is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the sev_pin_memory() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to cause a service failure.
The vulnerability of the sevpinmemory function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the __clk_rcg2_configure() function in the drivers/clk/qcom/clk-rcg2.c driver module of the Linux kernel’s software synchronization driver allows a attacker to cause a system failure.
The vulnerability of the clkrcg2configure function in the drivers/clk/qcom/clk-rcg2.c driver for Linux kernel-based system software synchronization allows for integer overflow attacks. Exploiting this vulnerability could enable an attacker to cause a system failure...
The vulnerability of the `compat_arm_syscall()` function in the `arch/arm64/kernel/sys_compat.c` module allows a hacker to trigger a service failure on the ARM 64-bit kernel-based Linux operating system.
The vulnerability of the compatarmsyscall function in the arch/arm64/kernel/syscompat.c module of the Linux operating system’s 64-bit ARM architecture kernel is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions l2cap_disconnect_req() and l2cap_disconnect_rsp() in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the functions l2capdisconnectreq and l2capdisconnectrsp in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem are related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting these vulnerabilities coul...
PT-2026-81273
The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...
ROS-20260825-73-0010
The vulnerability of the s3c24xxserialgetclk function in the drivers/tty/serial/samsungtty.c module of the console TTY driver in the Linux kernel’s serial port is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker...
ROS-20260825-73-0006
The vulnerability of the smbdnegotiate function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux operating systems, is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruption...
ROS-20260825-73-0005
The vulnerability of the afalgsendmsg function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
ROS-20260825-73-0039
The vulnerability of the evlistfreesyscalltpfields function in the tools/perf/builtin-trace.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260825-73-0018
The vulnerability of the devmclknotifierregister function in the drivers/clk/clk.c module of the Samsung Exynos CPU driver for Linux operating systems is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...
ROS-20260825-73-0014
The vulnerability of the xgenehwmonprobe function in the drivers/hwmon/xgene-hwmon.c module of the Linux device monitoring driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
ROS-20260825-73-0023
The vulnerability of the rbresetcpu function in the kernel/trace/ringbuffer.c module, which supports Linux kernel tracing, is related to an infinite loop. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...
ROS-20260825-73-0025
The vulnerability of the nestedvmcb02preparecontrol function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cau...
RHEL 8 : nginx:1.24 (RHSA-2026:59216)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59216 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...
OpenSSL 3.0.0 < 3.0.22 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.0.22. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.22 advisory. - Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and...