The vulnerability of the mct_u232_read_int_callback() function in the drivers/usb/serial/mct_u232.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the mctu232readintcallback function in the drivers/usb/serial/mctu232.c file of the Linux device driver for USB devices relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the nft_inner_restore_tun_ctx() function in the net/netfilter/nft_inner.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftinnerrestoretunctx function in the net/netfilter/nftinner.c module of the netfilter component of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ebtables_init() function in the net/bridge/netfilter/ebtables.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ebtablesinit function in the net/bridge/netfilter/ebtables.c module, which is part of Linux’s kernel-based networking functions, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the copy_context_work_handler() function in the drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the copycontextworkhandler function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the execution of operations beyond the buffer boundaries in...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to bypass security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

The vulnerability of the cypress_read_int_callback() function in the drivers/usb/serial/cypress_m8.c file of the Linux operating system’s USB device driver framework allows a hacker to cause a service failure.

The vulnerability of the cypressreadintcallback function in the drivers/usb/serial/cypressm8.c file of the Linux device driver for USB devices is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failu...

The vulnerability of the Windows Update Stack component allows attackers to escalate their privileges.

The vulnerability of the Windows Update Stack component in Windows operating systems is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the tls_push_record() function in the net/tls/tls_sw.c module of the Linux operating system’s TLS protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the mt6358_read_imp() function in the drivers/iio/adc/mt6359-auxadc.c file of various types of embedded sensors in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the mt6358readimp function in the drivers/iio/adc/mt6359-auxadc.c file of various types of embedded sensors in the Linux operating system is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

The vulnerability of the uniwill_init() function in the drivers/platform/x86/uniwill/uniwill-acpi.c driver for X86 processors in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the uniwillinit function in the drivers/platform/x86/uniwill/uniwill-acp.c driver for X86 devices in the Linux operating system is related to improper energy consumption restrictions. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the acpi_button_remove() function in the drivers/acpi/button.c driver of the ACPI configuration and power management extended interface for the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the acpibuttonremove function in the drivers/acpi/button.c driver of the Linux ACPI configuration and power management extension framework is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the linedisp_display() function in the drivers/auxdisplay/line-display.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the linedispdisplay function in the drivers/auxdisplay/line-display.c module of the Linux kernel is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the sprd_spi_probe() function in the drivers/spi/spi-sprd.c module of the Linux operating system’s SPI device driver allows a hacker to cause a service failure.

The vulnerability of the sprdspiprobe function in the drivers/spi/spi-sprd.c file of the Linux kernel’s SPI device driver relates to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the function ieee80211_ml_epcs() in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee80211mlepcs function in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the svdm_consume_modes() function in the drivers/usb/typec/tcpm/tcpm.c file of the driver for USB TypeC port controllers in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the svdmconsumemodes function in the drivers/usb/typec/tcpm/tcpm.c module of the USB TypeC port controller driver in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker...

The vulnerability of the snp_begin_psc() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the snpbeginpsc function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

The vulnerability of the rocket_ioctl_create_bo() function in the drivers/accel/rocket/rocket_gem.c module of the Linux kernel’s acceleration device driver allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rocketioctlcreatebo function in the drivers/accel/rocket/rocketgem.c module of the Linux kernel’s acceleration device driver lies in the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the format_dwdata() function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system allows a hacker to access protected information or cause service failure.

The vulnerability of the formatdwdata function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in Linux’s operating system is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a malicious act...

The vulnerability of the mongocryptd/crypt_shared component of the MongoDB Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the mongocryptd/cryptshared component of the MongoDB Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the adm1266_nvmem_read_blackbox() function in the drivers/hwmon/pmbus/adm1266.c driver for monitoring hardware in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adm1266nvmemreadblackbox function in the drivers/hwmon/pmbus/adm1266.c driver for monitoring hardware in the Linux operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to deficiencies in authentication procedures, allows attackers to create administrator accounts.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to create administrator accounts remotely...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key. This enables attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor to elevate their privileges and execute arbitrary code as the root...

The vulnerability of the SolarWinds Serv-U secure file sharing and transmission software, related to access control deficiencies, allows a perpetrator to execute arbitrary code as the root user.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on behalf of the root user remotely...

The vulnerability of the opap2430probe() function in the drivers/usb/musb/omap2430.c file of the Linux operating system’s USB device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the opmap2430probe function in the drivers/usb/musb/omap2430.c driver for Linux USB device drivers is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the SolarWinds Serv-U secure file sharing and transmission software, related to bypassing authentication using a user-controlled key, allows attackers to elevate their privileges to the level of system administrators.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker, operating remotely, to elevate their privileges to that of a system...

The vulnerability of the ISO9660 driver of the libfsimage library in Xen allows attackers to increase their privileges.

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to numerical overflow. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the RoundCube Webmail email client, related to the execution of a loop with an unavailable exit condition, allows a hacker to cause a service failure.

The vulnerability of the RoundCube Webmail email client is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the RoundCube Webmail email client, related to bypassing authentication through spamming, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the RoundCube Webmail email client relates to the ability to bypass authentication through spamming. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the vcs_write() function in the drivers/tty/vt/vc-screen.c file of the Linux kernel-based virtual terminal driver allows a hacker to cause a service failure.

The vulnerability of the vcswrite function in the drivers/tty/vt/vc-screen.c file of the Linux kernel virtual terminal driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the _dwc2_hcd_urb_dequeue() function in the driver module/dwc2/hcd.c of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dwc2hcdurbdequeue function in the driver module/dwc2/hcd.c of the Linux operating system’s USB device driver framework is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the avic_hardware_setup() function in the arch/x86/kvm/svm/avic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the avichardwaresetup function in the arch/x86/kvm/svm/avic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an...

The vulnerability of the compatibility package for Microsoft Azure Entra ID allows a perpetrator to circumvent the authentication process by using an alternative path or channel, thereby allowing them to increase their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

The vulnerability of the batadv_tt_prepare_tvlv_local_data() function in the net/batman-adv/translation-table.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the batadvttpreparetvlvlocaldata function in the net/batman-adv/translation-table.c module, which is part of the Linux kernel’s networking functions, is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an...

The vulnerability of the spi_qup_init_dma() function in the drivers/spi/spi-qup.c module of the Linux operating system’s SPI device driver allows a hacker to cause a service failure.

The vulnerability of the spiqupinitdma function in the drivers/spi/spi-qup.c module of the Linux operating system’s SPI device driver lies in the pointer that is dereferenced after its expiration time. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ethnl_act_module_fw_flash() function in the net/ethtool/module.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the ethnlactmodulefwflash function in the net/ethtool/module.c module, which implements networking functions in the Linux kernel, is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the iio_buffer_enqueue_dmabuf() function in the drivers/iio/industrialio-buffer.c file allows attackers to cause a service failure for various types of built-in sensor sensors in the Linux operating system.

The vulnerability of the iiobufferenqueuedmabuf function in the drivers/iio/industrialio-buffer.c module, which is used by various types of embedded sensors in Linux operating systems, involves a flaw where resources are not released after their useful period has ended. Exploiting this...

The vulnerability of the i801_access() function in the drivers/i2c/busses/i2c-i801.c module of the I2C driver for the Linux operating system’s hardware bus allows a hacker to cause a service failure.

The vulnerability of the i801access function in the drivers/i2c/busses/i2c-i801.c module of the I2C driver for the Linux operating system is related to premature release of resources during its operation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function batadv_tt_prepare_tvlv_global_data() in the module net/batman-adv/translation-table.c, which is part of the networking functions of the Linux operating system’s kernel, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function batadvttpreparetvlvglobaldata in the module net/batman-adv/translation-table.c, which is part of the networking functions of the Linux kernel, is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the ads1298_get_scale() function in the drivers/iio/adc/ti-ads1298.c driver for various types of built-in sensor sensors in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ads1298getscale function in the drivers/iio/adc/ti-ads1298.c driver for various types of embedded sensors in Linux operating systems is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the __cgroup_bpf_run_filter_sysctl() function in the kernel/bpf/cgroup.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cgroupbpfrunfiltersysctl function in the kernel/bpf/cgroup.c module, which supports the BPF interpreter for Linux kernels, is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the ipv4_sysctl_exit_net() function in the net/ipv4/sysctl_net_ipv4.c module of the IPv4 protocol implementation in Linux’s operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipv4sysctlexitnet function in the net/ipv4/sysctlnetipv4.c module of the IPv4 protocol implementation in Linux’s kernel relates to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the nf_conntrack_tcp_packet() function in the net/netfilter/nf_conntrack_proto_tcp.c module of the netfilter kernel of the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the nfconntracktcppacket function in the net/netfilter/nfconntrackprototcp.c module of the netfilter kernel of the Linux operating system is related to improper security checks for standard elements. Exploiting this vulnerability could allow a remote attacker to compromise th...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key, enabling them to execute arbitrary code.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...

The vulnerability of the ovpn_tcp_close() function in the drivers/net/ovpn/tcp.c module of the Linux kernel’s network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ovpntcpclose function in the drivers/net/ovpn/tcp.c module of the Linux kernel’s network device driver is related to a race condition in the signal processing routine. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to deficiencies in authentication procedures, allows attackers to elevate their privileges to the level of system administrators.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...

The vulnerability of the NS() function in the drivers/iommu/generic_pt/iommu_pt.h header of the Linux kernel allows a attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the NS function in the drivers/iommu/genericpt/iommupt.h header of the Linux kernel is related to improper security checks for standard elements. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of protected information...

The vulnerability in the software for secure file sharing and transmission of SolarWinds Serv-U, related to bypassing authentication using a user-controlled key, allows attackers to gain access to the account.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the account...

The vulnerability of the belkin_sa_read_int_callback() function in the drivers/usb/serial/belkin_sa.c file of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the belkinsareadintcallback function in the drivers/usb/serial/belkinsa.c file of the Linux device driver framework is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the lsm_name_to_attr() function in the security/lsm_syscalls.c module of the Linux kernel’s security subsystem allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the lsmnametoattr function in the security/lsmsyscalls.c module of the Linux kernel’s security subsystem is related to the blocking mechanism with unlimited external access. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity ...

The vulnerability of the store_modes() function in the drivers/video/fbdev/core/fbsysfs.c driver for kernel-based frame buffer devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the storemodes function in the drivers/video/fbdev/core/fbsysfs.c driver for kernel-based frame buffer devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...