Linux Distros Unpatched Vulnerability : CVE-2021-46973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Avoid potential use after free in MHI send It is possible that the MHI ulcallback...

Linux Distros Unpatched Vulnerability : CVE-2022-49393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - misc: fastrpc: fix list iterator in fastrpcreqmemunmapimpl This is another instance of incorrect use of list iterator and checking it for NULL. The list iterato...

Linux Distros Unpatched Vulnerability : CVE-2022-49634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data-races in procdou8vecminmax. A sysctl variable is accessed concurrently, and...

Linux Distros Unpatched Vulnerability : CVE-2024-35947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dyndbg: fix old BUGON in control parser Fix a BUGON from 2009. Even if it looks unreachable I didn't really look, lets make sure by removing it, doing prerr and...

Linux Distros Unpatched Vulnerability : CVE-2022-49495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/hdmi: check return value after calling platformgetresourcebyname It will cause null-ptr-deref if platformgetresourcebyname returns NULL, we need check t...

Linux Distros Unpatched Vulnerability : CVE-2022-48784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destruction My previous fix here to fix the...

Linux Distros Unpatched Vulnerability : CVE-2024-25744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and...

Linux Distros Unpatched Vulnerability : CVE-2022-49291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: pcm: Fix races among concurrent hwparams and hwfree calls Currently we have neither proper check nor protection against the concurrent calls of PCM hwpara...

Linux Distros Unpatched Vulnerability : CVE-2024-47746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: use exclusive lock when FUSEICACHEIOMODE is set This may be a typo. The comment has sa...

Linux Distros Unpatched Vulnerability : CVE-2024-25763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c. CVE-2024-25763 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2023-52703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/usb: kalmia: Don't pass actlen in usbbulkmsg error path syzbot reported that actlen in kalmiasendinitpacket is uninitialized when passing it to the first...

Linux Distros Unpatched Vulnerability : CVE-2024-26907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix fortify source warning while accessing Eth segment ------------ cut here ------------ memcpy: detected field-spanning write size 56 of single fie...

Linux Distros Unpatched Vulnerability : CVE-2022-49682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xtensa: Fix refcount leak bug in time.c In calibrateccount, offindcompatiblenode will return a node pointer with refcount incremented. We should use ofnodeput...

Linux Distros Unpatched Vulnerability : CVE-2022-49725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i40e: Fix call trace in setuptxdescriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time,...

Linux Distros Unpatched Vulnerability : CVE-2024-46744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squashfs: sanity check symbolic link size Syzkiller reports a KMSAN: uninit-value in picklink bug. This is caused by an uninitialised page, which is ultimately...

Linux Distros Unpatched Vulnerability : CVE-2024-26838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix KASAN issue with tasklet KASAN testing revealed the following issue assocate...

Linux Distros Unpatched Vulnerability : CVE-2022-48921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweightentity Syzbot found a GPF in reweightentity. This has been...

Linux Distros Unpatched Vulnerability : CVE-2022-28367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed...

Linux Distros Unpatched Vulnerability : CVE-2024-28246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KaTeX is a JavaScript library for TeX math rendering on the web. Code that uses KaTeX's trust option, specifically that provides a function to blacklist certain...

Linux Distros Unpatched Vulnerability : CVE-2022-49712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: lpc32xxudc: Fix refcount leak in lpc32xxudcprobe ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it whe...