101 matches found
Exploit for CVE-2025-39866
CVE-2025-39866 - use-after-free Author: Byte Reaper...
Security update for curl
This update for curl fixes the following issues: CVE-2025-9086: Fixed Out of bounds read for cookie path bsc1249191 CVE-2025-10148: Predictable WebSocket mask bsc1249348 Fix the --ftp-pasv option in curl v8.14.1 bsc1246197 tooloperate: fix return code when --retry is used but not triggered...
UBUNTU-CVE-2025-38098
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Don't treat wb connector as physical in createvalidatestreamforsink Don't try to operate on a drmwbconnector as an amdgpudmconnector. While dereferencing aconnector-base will "work" it's wrong and might lead to...
CVE-2025-38098
The CVE-2025-38098 issue affects the Linux kernel DRM AMD display stack. It centers on treating a wb (writeback) connector as physical in create_validate_stream_for_sink, and incorrect handling when operating on a drm_wb_connector as an amdgpu_dm_connector. The description notes that dereferencin...
UBUNTU-CVE-2022-49995
In the Linux kernel, the following vulnerability has been resolved: writeback: avoid use-after-free after removing device When a disk is removed, bdiunregister gets called to stop further writeback and wait for associated delayed work to complete. However, wbinodewritebackend may schedule bandwid...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not treat wbconnector as a physical device in createvalidatestreamforsink. Do not attempt to operate on drmwbconnector as an amdgpudmconnector. While dereferencing connector-base may “work”, it is incorrect an...
PT-2025-20502
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved by adding a check for the plane value in the dispc ovl setup function. The function is not intended to work with the value OMAP DSS ...
PT-2025-2988 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write due to a buffer overflow in wbrc bt dev write of wb regon coordinator.c. This could lead to local...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds write vulnerability, which stems from a lack of bounds checking in the wbrcbtdevwrite function of the wbregoncoordinator.c file, which can be exploited by an attacker to cause an...
PT-2024-17668 · WordPress · Magicpost
Name of the Vulnerable Software and Affected Versions: MagicPost plugin for WordPress versions up to, and including, 1.2.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's wb share social shortcode due to insufficient input sanitization and output escaping on...
Malicious code in wb-eth3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2061eab14aeb54b59ae68e0b58b1b8ae77a9a9a252407ae77eab392c71ef9c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10440 Malicious code in wb-eth3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2061eab14aeb54b59ae68e0b58b1b8ae77a9a9a252407ae77eab392c71ef9c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
REJECTED CVE...
CVE-2024-46689
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protected by XPU. XPU may sometime falsely detect clean cache eviction as "write" into the write protected...
Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits() again"
...
kernel: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
A vulnerability was found in the wbdirtylimits function in the Linux kernel, where a removed u64 cast in the dtc-wbthresh dtc-bgthresh operation can result in multiplication overflow on 32-bit architectures. This issue could lead to memory corruption or performance issues...
kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
REJECTED CVE...
kernel: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
A vulnerability was found in the wbdirtylimits function in the Linux kernel, where a removed u64 cast in the dtc-wbthresh dtc-bgthresh operation can result in multiplication overflow on 32-bit architectures. This issue could lead to memory corruption or performance issues...
DEBIAN-CVE-2024-42102
In the Linux kernel, the following vulnerability has been resolved: Revert "mm/writeback: fix possible divide-by-zero in wbdirtylimits, again" Patch series "mm: Avoid possible overflows in dirty throttling". Dirty throttling logic assumes dirty limits in page units fit into 32-bits. This patch...