The vulnerability of the msm_iommu_map() function in the drivers/gpu/drm/msm/msm_iommu.c file of the Direct Rendering Infrastructure (DRI) kernel driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the msmiommumap function in the drivers/gpu/drm/msm/msmiommu.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to incorrect checking of the returned value from this function. Exploiting this vulnerability could allow an attacker...

The vulnerability of the vfiopci_core_feature_dma_buf() function in the driver/vfio/pci/vfiopci_dmabuf.c file of the VFIO device drivers for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vfiopcicorefeaturedmabuf function in the driver/vfio/pci/vfiopcidmabuf.c file of the VFIO device drivers in the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the ip6_parse_tlv() function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ip6parsetlv function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to the lack of security measures for website structures, allows attackers to intercept sessions and gain access to user accounts.

The vulnerability of the software for secure file sharing and transmission related to SolarWinds Serv-U lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to intercept sessions and gain access to the user account...

The vulnerability of the ISO9660 driver of the libfsimage library in Xen hypervisors allows attackers to increase their privileges.

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the sfb_dequeue() function in the net/sched/sch_sfb.c module of the Linux operating system’s network/scheduling subsystem allows a attacker to cause a service failure.

The vulnerability of the sfbdequeue function in the net/sched/schsfb.c module of the Linux operating system’s network/scheduling subsystem is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the dma_buf_fd() function in the drivers/dma-buf/dma-buf.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dmabuffd function in the drivers/dma-buf/dma-buf.c module of the Linux kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence, related to errors in verifying cryptographic signatures, allows attackers to escalate their privileges.

The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

The vulnerability of the Microsoft Power Platform tools, related to insufficient validation of queries on the server side, allows attackers to escalate their privileges.

The vulnerability of the Microsoft Power Platform tools is related to insufficient testing of queries on the server side. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to bypass security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to escalate their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of the isAddingQuestionsAllowed() function in the phpMyFAQ web application allows a hacker to bypass existing security mechanisms.

The vulnerability of the isAddingQuestionsAllowed function in the phpMyFAQ web application is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to bypass existing security measures remotely...

The vulnerability of the is_supervision_frame() function in the net/hsr/hsr_forward.c module, which is part of the networking functions of the Linux operating system’s kernel, allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the issupervisionframe function in the net/hsr/hsrforward.c module, which is part of the networking functions of the Linux operating system’s kernel, relates to the issue of data being written outside of the buffer in memory. Exploiting this vulnerability could allow a...

The vulnerability of the fb_new_modelist() function in the drivers/video/fbdev/core/fbmem.c driver for kernel-based video buffer devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fbnewmodelist function in the drivers/video/fbdev/core/fbmem.c driver for kernel-based frame buffer devices in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ov8856_initControls() function in the drivers/media/i2c/ov8856.c file of the Linux kernel’s multimedia device driver allows a attacker to cause a service failure.

The vulnerability of the ov8856initControls function in the drivers/media/i2c/ov8856.c file of the Linux kernel’s multimedia device driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the amdgpu_gem_op_ioctl() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c driver for AMD GPU cores in the Linux operating system’s Direct Rendering Infrastructure (DRI) allows a attacker to cause a service failure.

The vulnerability of the amdgpugemopioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpugem.c driver for AMD GPU cores in the Linux operating system’s Direct Rendering Infrastructure DRI is related to the failure to release resources after their useful life has ended. Exploiting this...

The vulnerability of the __tb_property_parse_dir() function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the tbpropertyparsedir function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an...

The vulnerability of the xpadone_process_packet() function in the drivers/input/joystick/xpad.c module of the Linux operating system’s input device driver allows a hacker to cause a service failure.

The vulnerability of the xpadoneprocesspacket function in the drivers/input/joystick/xpad.c module of the Linux input device driver relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the function ipc_imem_init() of the drivers/net/wwan/iosm/iosm_ipc_imem.c file, a driver for network devices in the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the ipcimeminit function in the drivers/net/wwan/iosm/iosmipcimem.c file of the Linux kernel’s network device driver module is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause servi...

The vulnerability of the bmp580trigger_handler() function in the drivers/iio/pressure/bmp280-core.c file of various types of embedded sensors in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the bmp580triggerhandler function in the drivers/iio/pressure/bmp280-core.c file of various types of embedded sensors in the Linux operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker, acting remotely,...

The vulnerability of the adis16550_trigger_handler() function in the drivers/iio/imu/adis16550.c module of the Linux kernel allows a hacker to gain unauthorized access to protected information.

The vulnerability of the adis16550triggerhandler function in the drivers/iio/imu/adis16550.c module of the Linux kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to gain unauthorized access to protected information...

The vulnerability of the vgic_its_restore_dte() function in the arch/arm64/kvm/vgic/vgic-its.c module of the ARM virtualization subsystem in the 64-bit Linux operating system allows a attacker to access protected information or cause service failure.

The vulnerability of the vgicitsrestoredte function in the arch/arm64/kvm/vgic/vgic-its.c module of the ARM 64-bit kernel-based Linux operating system involves the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access...

The vulnerability of the vcn_v3_0_ring_patch_cs_in_place() function in the drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c driver for the Direct Rendering Infrastructure (DRI) of AMD GPU cores in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vcnv30ringpatchcsinplace function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for the Direct Rendering Infrastructure DRI of AMD GPU cores in the Linux operating system is related to improper checking of the specified data type. Exploiting this vulnerability may all...

The vulnerability of the mm_cid_fixup_cpus_to_tasks() function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mmcidfixupcpustotasks function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, relates to the execution of operations outside of buffers. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, due to lack of access control mechanisms, allows attackers to elevate their privileges to the level of system administrators.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...

The vulnerability in the software for secure file sharing and transmission of SolarWinds Serv-U, related to bypassing authentication using a user-controlled key, allows a perpetrator to intercept sessions and gain access to the account.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the ability to bypass authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely intercept sessions and gain control of the user account...

The vulnerability of the hist_field_name() function in the kernel/trace/traceeventshist.c file, which supports Linux operating system traceability, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the histfieldname function in the kernel/trace/traceeventshist.c module, which supports kernel tracing in Linux operating systems, is related to the pointer manipulation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

The vulnerability of the __iptfs_init_state() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptfsinitstate function in the net/xfrm/xfrmiptfs.c module, which implements networking functions in the Linux kernel, is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the rzv2h_ivc_transfer_buffer() function in the drivers/media/platform/renesas/rzv2h-ivc/rzv2h-ivc-video.c file of the Linux multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rzv2hivctransferbuffer function in the drivers/media/platform/renesas/rzv2h-ivc/rzv2h-ivc-video.c file, a driver for multimedia devices in the Linux operating system, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the dpu_writeback_init() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_writeback.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dpuwritebackinit function in the drivers/gpu/drm/msm/disp/dpu1/dpuwriteback.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow...

The vulnerability of the `ieee80211_parse_tx_radiotap()` function in the `net/mac80211/tx.c` module of the `mac80211` stack implementation in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee80211parsetxradiotap function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the adis16260_write_raw() function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adis16260writeraw function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the netem_enqueue() function in the net/sched/sch_netem.c module of the Linux operating system’s network scheduling subsystem allows a attacker to cause a service failure.

The vulnerability of the netemenqueue function in the net/sched/schnetem.c module of the Linux operating system’s network scheduling subsystem is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow a remote attacker t...

The vulnerability in the `qcom_geni_serial_handle_tx_dma()` function of the `drivers/tty/serial/qcom_geni_serial.c` driver of the TTY console driver in the Linux kernel’s serial port allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qcomgeniserialhandletxdma function in the drivers/tty/serial/qcomgeniserial.c driver of the TTY console driver in the Linux kernel’s serial port is related to a violation of the buffer boundary. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the stub_xfer() function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stubxfer function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the omninet_port_remove() function in the drivers/usb/serial/omninet.c module of the Linux device driver for USB devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the omninetportremove function in the drivers/usb/serial/omninet.c module of the Linux device driver for USB devices is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to escalate their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of the JSON processing library and stream-json, related to algorithmic complexity, allows attackers to cause service failures.

The vulnerability of the JSON processing library and stream-json is related to algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the module_flash_fw_schedule() function in the net/ethtool/module.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the moduleflashfwschedule function in the net/ethtool/module.c module, which is part of the Linux kernel’s networking functions, involves a situation where resources are not released after their useful period has ended. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the pep_do_rcv() function in the net/phonet/pep.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the pepdorcv function in the net/phonet/pep.c module, which is part of the Linux kernel’s networking functions, leads to mutual locking. Exploiting this vulnerability can allow a attacker to cause service failures...

The vulnerability of the `nvme_map_user_request()` function in the drivers/nvme/host/ioctl.c file of the NVME driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nvmemapuserrequest function in the drivers/nvme/host/ioctl.c file of the NVME driver for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the itg3200_read_all_channels() function in the drivers/iio/gyro/itg3200_buffer.c file of various types of embedded sensors in the Linux operating system allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the itg3200readallchannels function in the drivers/iio/gyro/itg3200buffer.c file of various types of embedded sensors in the Linux operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker, acting remotely,...

The vulnerability of the drm_gpusvm_scan_mm() function in the drivers/gpu/drm/drm_gpusvm.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the drmgpusvmscanmm function in the drivers/gpu/drm/drmgpusvm.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system relates to the unlocking of unlocked resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the lowpan_xmit() function in the net/ieee802154/6lowpan/tx.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lowpanxmit function in the net/ieee802154/6lowpan/tx.c module of the Linux kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the bio_integrity_copy_user() function in the block/bio-integrity.c module, which supports the block-level kernel in the Linux operating system. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the biointegritycopyuser function in the block/bio-integrity.c module, which supports the block-level kernel in the Linux operating system, is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the macsec_post_decrypt() function in the drivers/net/macsec.c module of the network device driver for the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the macsecpostdecrypt function in the drivers/net/macsec.c module of the network device driver for the Linux operating system is related to the bypassing of the authentication process. Exploiting this vulnerability allows a remote attacker to compromise the integrity of...

The vulnerability of the BPF_CALL_4() function in the net/core/filter.c module allows a hacker to compromise the privacy, integrity, and accessibility of protected information within the Linux operating system’s kernel-based networking functions.

The vulnerability of the BPFCALL4 function in the net/core/filter.c module related to the execution of kernel network functions in Linux operating systems involves a pointer shift beyond the allocated memory range. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, due to lack of access control mechanisms, allows attackers to elevate their privileges to the level of system administrators.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...

The vulnerability of the handle_fwk_notif_callbacks() function in the drivers/firmware/arm_ffa/driver.c file of the Linux kernel’s firmware driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the handlefwknotifcallbacks function in the drivers/firmware/armffa/driver.c file of the Linux kernel’s firmware driver relates to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, due to lack of access control, allows a perpetrator to elevate their privileges and execute commands as the root user.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute code under the identity of “root”...