The vulnerability of the rockchip_usb2phy_probe() function in the drivers/phy/rockchip/phy-rockchip-inno-usb2.c driver module of the Linux operating system’s kernel, which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rockchipusb2phyprobe function in the drivers/phy/rockchip/phy-rockchip-inno-usb2.c driver module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the nfsd4_encode_fattr4() function in the fs/nfsd/nfs4xdr.c module, which is part of the Linux kernel’s Network File System support, allows a hacker to cause a service failure.

The vulnerability of the nfsd4encodefattr4 function in the fs/nfsd/nfs4xdr.c module, which is part of the Linux kernel’s Network File System support, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the functions esp_output_tcp_finish() (net/ipv4/esp4.c) and esp_output_tcp_finish() (net/ipv6/esp6.c) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the espoutputtcpfinish function net/ipv4/esp4.c and espoutputtcpfinish function net/ipv6/esp6.c in the Linux kernel is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the iavf_alloc_q_vectors() function in the drivers/net/ethernet/intel/iavf/iavf_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iavfallocqvectors function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

The vulnerability of the sdma_v4_0_sw_fini() function in the driver/gpu/drm/amd/amdgpu/sdma_v4_0.c source code of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sdmav40swfini function in the driver/gpu/drm/amd/amdgpu/sdmav40.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could...

The vulnerability of the imx_clk_scu_alloc_dev() function in the drivers/clk/imx/clk-scu.c driver for the Samsung Exynos CPU in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the imxclkscuallocdev function in the drivers/clk/imx/clk-scu.c driver for the Samsung Exynos CPU in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the ubifs_release_folio() function in the fs/ubifs/file.c module of the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the ubifsreleasefolio function in the fs/ubifs/file.c module of the Linux kernel’s file system is related to copying buffers without checking their size a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the qtrr_endpoint_post() function in the net/qrtr/af_qrtr.c module allows for exploitation by attackers, enabling them to cause service interruptions on Qualcomm IPC-based Linux operating system kernels.

The vulnerability of the qrtrendpointpost function in the net/qrtr/afqrtr.c module, which is part of the Qualcomm IPC kernel for Linux operating systems, is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the ti_am335x_xbar_route_allocate() function in the drivers/dma/ti/dma-crossbar.c module of the Linux kernel’s DMA driver, which allows a hacker to cause a system failure.

The vulnerability of the tiam335xxbarrouteallocate function in the drivers/dma/ti/dma-crossbar.c module of the Linux kernel’s DMA driver relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerabilities of the functions ath11k_dp_rx_mon_mpdu_pop() and ath11k_dp_rx_full_mon_mpdu_pop() in the module drivers/net/wireless/ath/ath11k/dp_rx.c of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system allow a hacker to induce a service failure.

The vulnerability of the functions ath11kdprxmonmpdupop and ath11kdprxfullmonmpdupop in the drivers/net/wireless/ath/ath11k/dprx.c module of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to the execution of a loop with an unreachable exit condition...

The vulnerability of the /goform/form2WlanBasicSetup.cgi file of the goahead component of D-Link DIR-816 router software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/form2WlanBasicSetup.cgi file of the goahead component of D-Link DIR-816 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

The vulnerability of the try_smi_init() function in the drivers/char/ipmi/ipmi_si_intf.c driver for Linux’s alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the trysmiinit function in the drivers/char/ipmi/ipmisiintf.c file of the Linux operating system’s character device driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smbddestroy() function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the smbddestroy function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux kernel, stems from the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability allows a...

The vulnerability of the /goform/form2Wl5RepeaterStep2.cgi file of the goahead component of D-Link DIR-816 router software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/form2Wl5RepeaterStep2.cgi file of the goahead component of the D-Link DIR-816 router software lies in buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the `dc_construct_ctx()` function in the drivers/gpu/drm/amd/display/dc/core/dc.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a malicious actor to cause a system failure.

The vulnerability of the dcconstructctx function in the drivers/gpu/drm/amd/display/dc/core/dc.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper memory release memory leak. Exploiting this vulnerability can allow an...

The vulnerability of the igb_set_fw_version() function in the drivers/net/ethernet/intel/igb/igb_main.c file of the Linux kernel’s Ethernet adapter support driver allows a attacker to cause a system failure.

The vulnerability of the igbsetfwversion function in the drivers/net/ethernet/intel/igb/igbmain.c file of the Intel Ethernet network adapter support driver in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the rockchip_i2s_tdm_resume() function in the sound module/soc/rockchip/rockchip_i2s_tdm.c file, which supports audio functions for Linux operating system SoCs, allows a hacker to cause a service failure.

The vulnerability of the rockchipi2stdmresume function in the sound module/soc/rockchip/rockchipi2stdm.c file, which is related to the Linux operating system’s sound support for SoCs, stems from improper memory release mechanisms memory leaks. Exploiting this vulnerability could allow an attacker...

The vulnerability of the downloadToDir() function in the FTP-client library of the Node.js software platform, which allows a hacker to execute arbitrary code.

The vulnerability of the downloadToDir function in the FTP-client library of the Node.js software platform is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the spi_qupremove() function in the drivers/spi/spi-qup.c module of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the spiqupremove function in the drivers/spi/spi-qup.c module of the Linux operating system’s SPI device driver relates to a memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the rtw_core_deinit() function in the drivers/net/wireless/realtek/rtw88/main.c file of the Realtek wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rtwcoredeinit function in the drivers/net/wireless/realtek/rtw88/main.c file of the Realtek wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability in the WireGuard Portal’s node and interface management web interfaces, related to authentication errors, allows attackers to elevate their privileges to the level of administrators.

The vulnerability in the WireGuard Porta node management and interface interfaces is related to authentication errors. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the level of an administrator by sending a PUT request...

The vulnerability of the gs_usb_receive_bulk_callback() function in the drivers/net/can/usb/gs_usb.c module of the Linux network device driver framework allows a attacker to cause a service failure.

The vulnerability of the gsusbreceivebulkcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver module is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the set_blocksize() function in the block/bdev.c module of Linux’s kernel-level block support mechanism allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the setblocksize function in the block/bdev.c module, which supports the block-level kernel in the Linux operating system, is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability in the function r535_gsp_postinit() of the drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c driver module allows a hacker to trigger a service failure. This vulnerability exposes the kernel of the Linux operating system’s Nouveau graphics driver to exploitation.

The vulnerability of the r535gsppostinit function in the drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c driver module relates to the Direct Rendering Infrastructure DRI support for NVIDIA graphics cards in the Linux operating system. This vulnerability involves the premature release of resources...

The vulnerability of the rtl9300_i2c_config_xfer() function in the drivers/i2c/busses/i2c-rtl9300.c driver of the I2C hardware layer of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtl9300i2cconfigxfer function in the drivers/i2c/busses/i2c-rtl9300.c driver of the I2C bus subsystem of the Linux operating system is related to the absence of initialization for variables. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the graph_util_parse_dai() function in the sound/soc/generic/simple-card-utils.c module of the Linux operating system’s SoC audio support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the graphutilparsedai function in the sound/soc/generic/simple-card-utils.c module of the Linux operating system’s sound support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Vulnerability of the yuv_ensure_buffer() function in the RDP client FreeRDP, allowing a intruder to execute arbitrary code

The vulnerability of the yuvensurebuffer function in the RDP client FreeRDP is related to incorrect calculations of the size of the buffer allocated. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted NAL packets...

The vulnerability of the ASUS Business System Control Interface arises from the improper assignment of permissions for critical resources, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the ASUS Business System Control Interface is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by sending a specially crafted IOCTL request...

The vulnerability of the formSchedule() function in the /goform/formSchedule file of the boa software component for D-Link DIR-619L routers allows a hacker to execute arbitrary code.

The vulnerability of the formSchedule function in the /goform/formSchedule file of the boa microprogramming system for D-Link DIR-619L routers is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the cifs_demultiplex_thread() function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the cifsdemultiplexthread function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of microprogrammed software in embedded access controllers of Dell iDRAC9 lies in the insufficient protection of service data when transitioning to debugging mode, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of microprogramming software in embedded access controllers of Dell iDRAC9 relates to insufficient protection of service data when entering debugging mode. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The software for designing and configuring electrical systems of Schneider Electric EcoStruxure Power Build Rapsody is vulnerable due to the use of memory after it is released. This vulnerability allows a attacker to execute arbitrary code.

The vulnerability of Schneider Electric EcoStruxure Power Build Rapsody software for designing and configuring electrical systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created SSD file...

The vulnerability of the pidff_reset() function in the drivers/hid/usbhid/hid-pidff.c module of the Linux kernel’s user interface device subsystem allows a attacker to cause a service failure.

The vulnerability of the pidffreset function in the drivers/hid/usbhid/hid-pidff.c module of the Linux kernel’s user interface device subsystem driver is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote...

The vulnerability of the __sev_firmware_shutdown() function in the drivers/crypto/ccp/sev-dev.c driver of the Linux kernel’s cryptographic accelerator module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sevfirmwareshutdown function in the drivers/crypto/ccp/sev-dev.c file of the Linux kernel cryptographic accelerator driver involves the assignment of a null pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the...

The vulnerability of the redirect.asp file in the goahead component of D-Link DIR-816 router software allows a hacker to access the redirect.asp page and extract the token_id.

The vulnerability of the redirect.asp file of the goahead component in D-Link DIR-816 router microprogramming software is related to deficiencies in access control and improper assignment of privileges. Exploiting this vulnerability allows an attacker to gain access to the redirect.asp page and...

The software for designing and configuring electrical systems of Schneider Electric EcoStruxure Power Build Rapsody is vulnerable due to a memory reclamation error, allowing an attacker to execute arbitrary code.

The vulnerability of Schneider Electric EcoStruxure Power Build Rapsody software for electrical system design and configuration is related to a memory release error. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created SSD file...

The vulnerability of the web interface of TOTOLINK X5000R router software allows a hacker to cause a service failure.

The vulnerability of the web interface of TOTOLINK X5000R router microprogramming software is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures through a specially created POST request...

The vulnerability of the Delegated License Service (DLS) component of NVIDIA’s licensing system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Delegated License Service DLS component of NVIDIA’s licensing system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the `watch_queue_set_size()` function in the kernel/watch_queue.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the watchqueuesetsize function in the kernel/watchqueue.c module of the Linux operating system is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rpi_ts_probe() function in the drivers/input/touchscreen/raspberrypi-ts.c file of the touchscreen driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rpitsprobe function in the drivers/input/touchscreen/raspberrypi-ts.c file of the touchscreen driver for the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerability of the JWT implementation in Python PyJWT lies in the insufficient verification of data authenticity. This allows attackers to circumvent existing security mechanisms.

The vulnerability of the JWT implementation in Python PyJWT is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the pci_iov_scan_device() function in the drivers/pci/iov.c module of the Linux operating system’s device support driver allows a hacker to cause a service failure.

The vulnerability of the pciiovscandevice function in the drivers/pci/iov.c module of the Linux operating system’s device support driver relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the replace_free_hugepage_folios() function in the mm/hugetlb.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the replacefreehugepagefolios function in the mm/hugetlb.c module of the Linux kernel’s memory management subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mlx5r_umr_cleanup() function in the drivers/infiniband/hw/mlx5/umr.c file of the Linux kernel’s InfiniBand support driver allows a malicious actor to cause a service failure.

The vulnerability of the mlx5rumrcleanup function in the drivers/infiniband/hw/mlx5/umr.c file of the Linux kernel’s InfiniBand support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dup_userfaultfd_complete() function in the fs/userfaultfd.c module of the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the dupuserfaultfdcomplete function in the fs/userfaultfd.c module of the Linux file system is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the BPF_CALL_3() function in the net/core/filter.c module allows a hacker to trigger a service failure. This vulnerability is related to the support for kernel network functions in the Linux operating system.

The vulnerability of the BPFCALL3 function in the net/core/filter.c module related to Linux kernel network functions is associated with errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the net/netfilter/nf_tables_api.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/netfilter/nftablesapi.c module of the Linux operating system is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the formQuickIndex() function in the Tenda CH22 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formQuickIndex function in the Tenda CH22 router’s microprogramming software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request...

The vulnerability of the Nicolet WFT library’s parsing functionality, libbiosig, allows a intruder to execute arbitrary code.

The vulnerability of the Nicolet WFT library’s medical signal processing functionality, libbiosig, is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created wft file...

The vulnerability of the JOSE library Authlib implementation for OAuth and OpenID Connect servers is related to errors in verifying cryptographic signatures. This allows attackers to circumvent existing security mechanisms.

The vulnerability of the JOSE library Authlib implementation for OAuth and OpenID Connect servers is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...