74701 matches found
The vulnerability of the smb2_send_interim_resp() function in the fs/ksmbd/smb2pdu.c module of the Linux file system support module allows a attacker to compromise the integrity of protected information or cause service failures.
The vulnerability of the smb2sendinterimresp function in the fs/ksmbd/smb2pdu.c module of the Linux file system support module is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information or cause service...
The vulnerability of the ufshcd_set_dma_mask() function in the drivers/ufs/core/ufshcd.c module affects UFS-host controllers in Linux operating systems. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ufshcdsetdmamask function in the drivers/ufs/core/ufshcd.c module affects UFS-host controllers. In Linux operating systems, this vulnerability is related to the reallocation of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerabilities of the functions nfsacld_proc_getacl() and nfsd3_proc_getacl() in the fs/nfsd/nfs2acl.c module compromise the support for the Network File System (NFS) in Linux kernels. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functions nfsacldprocgetacl and nfsd3procgetacl in the fs/nfsd/nfs2acl.c module related to the support for the Network File System in Linux operating systems is associated with the reutilization of previously freed memory. Exploiting this vulnerability could allow an...
Vulnerability of the ptp_clock_register() function in the drivers/ptp/ptp_clock.c module – The PTP clock driver for Linux kernels allows a hacker to trigger a service failure.
Vulnerability of the ptpclockregister function in the drivers/ptp/ptpclock.c module – The Linux kernel’s PTP clock driver is vulnerable to a vulnerability where memory is not properly freed before the last reference is removed memory leak. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the neigh_forced_gc() function in the net/core/neighbour.c module of the Linux kernel’s networking functions allows a hacker to cause a service failure.
The vulnerability of the neighforcedgc function in the net/core/neighbour.c module, which is part of Linux’s kernel-based networking functions, is related to buffer overflows based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the get_firmware_info_v3_2() function in the drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems, which allows a hacker to cause a service failure.
Vulnerability of the getfirmwareinfov32 function in the drivers/gpu/drm/amd/display/dc/bios/biosparser2.c module – The driver that supports Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is vulnerable due to a NULL pointer dereferencing issue. Exploiting thi...
The vulnerability relates to the definition of the `f2fs_fault_info{}` structure in the `fs/f2fs/f2fs.h` module of the Linux file system support module for F2FS kernels. This vulnerability allows an attacker to access protected information or cause service failures.
The vulnerability related to the definition of the f2fsfaultinfo structure in the fs/f2fs/f2fs.h module of the Linux file system support module f2FS is associated with code errors. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...
The vulnerability of the bt_sock_recvmsg() function in the net/bluetooth/af_bluetooth.c module of the Linux Bluetooth subsystem allows a hacker to cause a service failure.
The vulnerability of the btsockrecvmsg function in the net/bluetooth/afbluetooth.c module of the Linux Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the io_rw_init_file() function in the io_uring/rw.c module, a component of the Linux kernel’s asynchronous input/output interface, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iorwinitfile function in the iouring/rw.c module, a component of the Linux kernel’s asynchronous input/output interface, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the __mptcp_close_ssk() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mptcpclosessk function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...
Vulnerability of the bond_3ad_unbind_slave() function in the drivers/net/bonding/bond_3ad.c module – The Linux kernel network device driver support module, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the bond3adunbindslave function in the drivers/net/bonding/bond3ad.c module – Linux kernel-based device support drivers are vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Vulnerability of the int3400_setup_gddv() function in the drivers/thermal/intel/int340x_thermal/int3400_thermal.c module – a Linux kernel temperature control driver that allows a hacker to cause a service failure.
Vulnerability of the int3400setupgddv function in the drivers/thermal/intel/int340xthermal/int3400thermal.c module – The Linux kernel temperature control driver contains errors in its code. Exploiting this vulnerability could allow an attacker to cause system failures...
The vulnerability of the bnxt_re component in the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the bnxtre component in the Linux operating system’s kernel is related to the assignment of the null pointer. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the nfcgenl_dump_ses_done() function in the net/nfc/netlink.c module of the NFC subsystem of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the nfcgenldumpsesdone function in the net/nfc/netlink.c module of the NFC subsystem of the Linux kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Apache Pinot OLAP data store, related to incorrect restrictions on the path name to the restricted catalog, allows attackers to disclose protected information.
The vulnerability of the Apache Pinot OLAP data store is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to expose protected information by sending a specially crafted GET request...
Microsoft Edge browser’s vulnerability, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the hugetlb component of the try_get_folio() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the hugetlb component in the trygetfolio function of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the nr_route_frame() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the nrrouteframe function in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of components related to DRM, AMD, and display in the Linux operating system is associated with incorrect validation of input data in the function dcvalidateseamlessboottiming. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the Linux operating system’s Bluetooth kernel component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s Bluetooth kernel component is related to incorrect blocking of resources in the function rfcommsockioctl. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Xen kernel component in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the xen component in the Linux operating system’s kernel is related to a memory leak in the xenbusdevprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `s.contexts._.configure` function in the library for loading JavaScript modules via RequireJS allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the s.contexts..configure function in the library for loading JavaScript modules using RequireJS is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service...
Vulnerability of components of Linux operating system’s kernel/mlx5, allowing a hacker to cause a service failure
The vulnerability of Linux operating system’s net/mlx5core components is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the `spapr_tce_platform_iommu_attach_dev()` function in the arch/powerpc/kernel/iommu.c module of the PowerPC platform support module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the spaprtceplatformiommuattachdev function in the arch/powerpc/kernel/iommu.c module of the Linux PowerPC platform support module is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `timerlat_fd_open()` function in the kernel/trace/trace_osnoise.c module, which supports Linux operating system tracing, allows a hacker to cause a service failure.
The vulnerability of the timerlatfdopen function in the kernel/trace/traceosnoise.c module, which supports Linux operating system tracing, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the function dcn35_clk_mgr_helper_populate_bw_params() in the module drivers/gpu/drm/amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c – A driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards with Linux operating systems. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the function dcn35clkmgrhelperpopulatebwparams in the module drivers/gpu/drm/amd/display/dc/clkmgr/dcn35/dcn35clkmgr.c – Drivers supporting Direct Rendering Infrastructure DRI for AMD graphics cards with Linux operating systems have a unvalidated array indexing issue. Exploiting...
Vulnerability of the sun8i_dwmac_dmainterrupt() function in the drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c module – A driver for supporting Ethernet network adapters in the Linux operating system, which allows an attacker to compromise the integrity of protected information.
Vulnerability of the sun8idwmacdmainterrupt function in the drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c module – The Linux kernel’s Ethernet adapter support driver has a vulnerability related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability cou...
Vulnerability of the fsl_mc_bus_remove() function in the drivers/bus/fsl-mc/fsl-mc-bus.c module – The fsl-mc bus driver in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the fslmcbusremove function in the drivers/bus/fsl-mc/fsl-mc-bus.c module – The fsl-mc bus driver in Linux kernel is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of the cleanup_srcu_struct() function in the kernel/rcu/srcutree.c module of the synchronization subsystem in Linux multi-threaded kernel systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cleanupsrcustruct function in the kernel/rcu/srcutree.c sub-system of the synchronization mechanism in Linux multi-threaded kernel systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the jffs2_do_fill_super() function in the fs/jffs2/fs.c module of the jffs2 file system support in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the jffs2dofillsuper function in the fs/jffs2/fs.c module of the jffs2 file system support in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Vulnerability of the iavf_init_module() function in the drivers/net/ethernet/intel/iavf/iavf_main.c module – This is a driver for supporting Ethernet network adapters in Linux kernel-based operating systems. It allows attackers to gain access to protected information.
The vulnerability of the iavfinitmodule function in the drivers/net/ethernet/intel/iavf/iavfmain.c module exists. This vulnerability in the Linux kernel’s Ethernet driver code allows attackers to access protected information...
Vulnerability of the parse_qcomsmem_part() function in the drivers/mtd/parsers/qcomsmempart.c module – This is a memory support driver for Linux kernel, which allows an attacker to trigger a system failure.
Vulnerability of the parseqcomsmempart function in the drivers/mtd/parsers/qcomsmempart.c module – Linux kernel’s memory support drivers are vulnerable due to a reliance on the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to cause system failures...
The vulnerability of the inet_sk_diag_fill() function in the net/ipv4/inet_diag.c module of the IPv4 protocol implementation in the Linux operating system allows a attacker to access protected information.
The vulnerability of the inetskdiagfill function in the net/ipv4/inetdiag.c module of the IPv4 protocol implementation in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to access protected information...
The vulnerability in browser extensions for Safari on operating systems macOS, iOS, iPadOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Safari browser extensions on macOS, iOS, iPadOS, and VisionOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
Vulnerability of the iio_sysfs_triggerremove() function in the drivers/iio/trigger/iio-trig-sysfs.c module – This driver supports various types of built-in sensors in the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the iiosysfstriggerremove function in the drivers/iio/trigger/iio-trig-sysfs.c module – The drivers for various types of built-in sensors in the Linux operating system are related to the reallocation of previously freed memory. Exploiting this vulnerability could allow an attacke...
The vulnerability of the tipc_exit_net() function in the net/tipc/core.c module of the TIPC protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tipcexitnet function in the net/tipc/core.c module of the TIPC protocol implementation in Linux’s operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Vulnerability of the dce110_disable_stream() function in the drivers/gpu/drm/amd/display/dc/dce110/dce110_hw_sequencer.c file – This is a driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems. It allows attackers to cause service failures.
Vulnerability of the dce110disablestream function in the drivers/gpu/drm/amd/display/dc/dce110/dce110hwsequencer.c module – The driver for AMD GPU Direct Rendering Infrastructure in Linux operating systems is vulnerable to uncontrolled resource consumption. Exploiting this vulnerability could all...
The vulnerability of the in_atomic core function in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the inatomic kernel function in the Linux operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerabilities of the FortiOS graphical interface, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE allow attackers to execute arbitrary code.
The vulnerability of the FortiOS graphical interface, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE are related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote...
The vulnerability of the Ruby interpreter’s Rack module interface allows attackers to influence the integrity of the protected information.
The vulnerability of the Ruby interpreter’s Rack module interface is related to improper processing of output data for registration logs. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information...
The vulnerability of the OpenSearch software package, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.
Vulnerability of the OpenSearch software package, related to insufficient protection of operational data. Exploiting this vulnerability may allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Internet Key Exchange version 2 module in Cisco IOS XR operating systems allows a hacker to trigger a service failure.
The vulnerability of the Internet Key Exchange version 2 IKEv2 module in Cisco IOS XR operating systems is related to the use of incorrect authentication tokens due to unlimited resource allocation. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the VPN service and the system for protecting end devices of GlobalProtect’s PAN-OS allows a perpetrator to trigger a service failure.
The vulnerability of the VPN service and the GlobalProtect endpoint protection system’s management system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Vulnerability of RDMA/hns components of Linux operating system cores, allowing attackers to cause service interruptions
The vulnerability of RDMA/hns components of the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s kernel Wi-Fi component relates to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the EMACS text editor arises from the lack of measures taken to eliminate special elements, allowing attackers to execute arbitrary commands.
The vulnerability of the EMACS text editor exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Mozilla Firefox browser, related to insufficient protection of service data, allows attackers to disclose protected information.
The vulnerability of the Mozilla Firefox browser is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...
Vulnerability of the btmtksdio_recv_event() function in the drivers/bluetooth/btmtksdio.c module – The Bluetooth device support driver for the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the btmtksdiorecvevent function in the drivers/bluetooth/btmtksdio.c module – The Linux kernel’s Bluetooth device support driver is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
Vulnerability of the vt_ioctl() function in the drivers/tty/vt/vt_ioctl.c module – The console support driver for the Linux kernel allows a hacker to cause a service failure.
Vulnerability of the vtioctl function in the drivers/tty/vt/vtioctl.c module – The driver for supporting TTY consoles in Linux operating systems is vulnerable to integer overflow or cyclic shift attacks. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the ufshcd_exec_dev_cmd() function in the drivers/scsi/ufs/ufshcd.c module – This driver provides support for SCSI devices in the Linux operating system. It can be exploited by attackers to cause service failures.
Vulnerability of the ufshcdexecdevcmd function in the drivers/scsi/ufs/ufshcd.c module – The Linux kernel’s SCSI device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...