95883 matches found
The vulnerability of the sctp_unpack_cookie() function in the net/sctp/sm_make_chunk.c module of the Linux operating system’s SCTP kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sctpunpackcookie function in the net/sctp/smmakechunk.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter mismatches. Exploiting this vulnerability allows a remote attacker to compromise the...
The vulnerability of the devlink_free() function in the net/devlink/core.c module, a implementation of networking functions in the Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the devlinkfree function in the net/devlink/core.c module, which is part of the Linux kernel’s networking functions, stems from the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service...
The vulnerability of the amdgpu_info_ioctl() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c source code of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the amdgpuinfoioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpukms.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this...
The vulnerability of the `ras_core_isEnabled()` function in the `drivers/gpu/drm/amd/ras/rascore/ras_core.c` file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a malicious actor to cause a service failure.
The vulnerability of the rascoreisEnabled function in the drivers/gpu/drm/amd/ras/rascore/rascore.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow a remote...
The vulnerability of the Python library for working with PDF files, PyPDF, is related to errors in processing XML objects, which allows an attacker to cause a service failure.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to errors in processing XML objects. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation, allowing attackers to cause service interruptions.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of Apache ActiveMQ software is related to deficiencies in access control, which allow attackers to bypass security restrictions and gain unauthorized access to protected information.
The vulnerability of Apache ActiveMQ-related software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...
The vulnerability of the dal_vector_reserve() function in the drivers/gpu/drm/amd/display/dc/basics/vector.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the dalvectorreserve function in the drivers/gpu/drm/amd/display/dc/basics/vector.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to a buffer overflow in dynamic memory. Exploiting this vulnerability could...
The vulnerability of the `scx_cgroupMoveTask()` function in the kernel/sched/ext.c module, which is part of the Linux kernel’s resource management support system, allows a hacker to cause a service failure.
The vulnerability of the scxcgroupMoveTask function in the kernel/sched/ext.c module, which is part of the Linux kernel’s resource management support mechanism, is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to trigger a service failur...
The vulnerability of the vfiopci_core_close_device() function in the drivers/vfio/pci/vfiopci_core.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vfiopcicoreclosedevice function in the drivers/vfio/pci/vfiopcicore.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the pch_spi_pdremove() function in the drivers/spi/spi-topcliff-pch.c driver module of the Linux operating system’s SPI device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pchspipdremove function in the drivers/spi/spi-topcliff-pch.c driver for Linux’s SPI device drivers is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the vsp1destroy_entities() function in the drivers/media/platform/renesas/vsp1/vsp1_drv.c file of the multimedia device driver for the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the vsp1destroyentities function in the drivers/media/platform/renesas/vsp1/vsp1drv.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the v3d_get_multisync_submit_deps() function in the drivers/gpu/drm/v3d/v3d_submit.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the v3dgetmultisyncsubmitdeps function in the drivers/gpu/drm/v3d/v3dsubmit.c module of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this...
The vulnerability of the `tap_get_user_xdp()` function in the `drivers/net/tap.c` file of the Linux kernel’s network device driver allows a attacker to cause a service failure.
The vulnerability of the tapgetuserxdp function in the drivers/net/tap.c file of the Linux kernel network device driver involves copying buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the batadv_gw_node_delete() function in the net/batman-adv/gateway_client.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the batadvgwnodedelete function in the net/batman-adv/gatewayclient.c module, which is part of the Linux kernel’s networking functions, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the `compat_mtw_from_user()` function in the `net/bridge/netfilter/ebtables.c` module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the compatmtwfromuser function in the net/bridge/netfilter/ebtables.c module, which is part of the Linux kernel’s networking functions, is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
The vulnerability of the sctp_sf_do_5_2_6_stale() function in the net/sctp/sm_statefuns.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sctpsfdo526stale function in the net/sctp/smstatefuns.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the sctp_process_strreset_resp() function in the net/sctp/stream.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to cause a service failure.
The vulnerability of the sctpprocessstrresetresp function in the net/sctp/stream.c module of the Linux operating system’s SCTP protocol implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to cause...
The vulnerability of the espintcp_sendmsg() function in the net/xfrm/espintcp.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the espintcpsendmsg function in the net/xfrm/espintcp.c module, which implements networking functions in the Linux kernel, relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...
Vulnerability of the functions xe_gem_prime_import() and xe_dma_buf_init_obj() in the drivers/gpu/drm/xe/xe_dma_buf.c module of the Linux kernel, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functions xegemprimeimport and xedmabufinitobj in the drivers/gpu/drm/xe/xedmabuf.c module of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the xe_gem_prime_import() function in the drivers/gpu/drm/xe/xe_dma_buf.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xegemprimeimport function in the drivers/gpu/drm/xe/xedmabuf.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
The vulnerability of the crush_decode() function in the net/ceph/osdmap.c kernel of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the crushdecode function in the net/ceph/osdmap.c module of the Linux kernel is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the xe_exec_queue_create_ioctl() function in the drivers/gpu/drm/xe/xe_exec_queue.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xeexecqueuecreateioctl function in the drivers/gpu/drm/xe/xeexecqueue.c file of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the psp_assoc_device_get_locked() function in the net/psp/psp_nl.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.
The vulnerability of the pspassocdevicegetlocked function in the net/psp/pspnl.c module, which is part of the Linux kernel’s networking functions, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service...
The vulnerability of the netem_enqueue() function in the net/sched/sch_netem.c module of the Linux operating system’s network scheduling subsystem allows a attacker to cause a service failure.
The vulnerability of the netemenqueue function in the net/sched/schnetem.c module of the Linux operating system’s network scheduling subsystem is related to unlimited resource allocation. Exploiting this vulnerability could allow a attacker to cause service failures...
The vulnerability of the nsim_dev_trap_skb_build() function in the drivers/net/netdevsim/dev.c module of the network device drivers for the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the nsimdevtrapskbbuild function in the drivers/net/netdevsim/dev.c file of the Linux kernel’s network device driver module is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the bpf_iter_unix_seq_show() function in the net/unix/af_unix.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the bpfiterunixseqshow function in the net/unix/afunix.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility ...
The vulnerability of the hid_post_reset() function in the drivers/hid/usbhid/hid-core.c file of the Linux kernel subsystem for user interface devices allows a hacker to cause a service failure.
The vulnerability of the hidpostreset function in the drivers/hid/usbhid/hid-core.c file of the Linux kernel subsystem for user interface devices leads to a mutual locking mechanism being activated. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the drm_gem_change_handle_ioctl() function in the drivers/gpu/drm/drm_gem.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the drmgemchangehandleioctl function in the drivers/gpu/drm/drmgem.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...
The vulnerability of the dma_length() function in the drivers/accel/ethosu/ethosu_gem.c module of the Linux kernel’s acceleration device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dmalength function in the drivers/accel/ethosu/ethosugem.c module of the Linux kernel’s acceleration device driver lies in integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of the ethosu_gem_cmdstream_copy_and_validate() function in the drivers/accel/ethosu/ethosu_gem.c driver for Linux kernel acceleration devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ethosugemcmdstreamcopyandvalidate function in the drivers/accel/ethosu/ethosugem.c driver for Linux computing devices involves the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the vmci_transport_recv_listen() function in the net/vmw_vsock/vmci_transport.c module, which is part of the networking functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vmcitransportrecvlisten function in the net/vmwvsock/vmcitransport.c module, which is part of the networking functions of the Linux kernel, is related to resource management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the nft_exthdr_init() function in the net/netfilter/nft_exthdr.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nftexthdrinit function in the net/netfilter/nftexthdr.c module of the netfilter component of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
The vulnerability of the sk_setsockopt() function in the net/core/sock.c module exposes the support for networking functions in the Linux kernel. This allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sksetsockopt function in the net/core/sock.c module related to Linux kernel network functions is associated with deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the dcn32_enable_phantom_plane() function in the drivers/gpu/drm/amd/display/dc/resource/dcn32/dcn32_resource.c driver of the Direct Rendering Infrastructure (DRI) module for AMD video cards in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the dcn32enablephantomplane function in the drivers/gpu/drm/amd/display/dc/resource/dcn32/dcn32resource.c driver of the Direct Rendering Infrastructure DRI module for AMD video cards in Linux operating systems is related to an unvalidated error condition. Exploiting this...
The vulnerability of the relocate_kernel() function in Linux’s x86/kexec components allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the relocatekernel function in Linux’s x86/kexec components is related to buffer overflows in the stack. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the fromSetCmdlineRun() function in the Tenda A18 router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the fromSetCmdlineRun function in the Tenda A18 router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Python library for working with PDF files, PyPDF, involves an uncontrolled resource consumption, allowing attackers to cause service failures.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the ASP.NET Core software platform, related to unlimited resource distribution, allows attackers to cause service failures.
The vulnerability of the ASP.NET Core software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the console-based graphic editor ImageMagick, related to integer overflow, allows a hacker to cause a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the “magnify” operation in the console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.
The vulnerability of the “magnify” operation in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the .NET software platform, related to type mixing errors, allows attackers to trigger a service failure.
The vulnerability of the .NET software platform is related to type mixing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the sps30_i2c_read_meas() function in the drivers/iio/chemical/sps30_i2c.c driver module exposes various types of embedded sensors integrated into the Linux operating system. This allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sps30i2creadmeas function in the drivers/iio/chemical/sps30i2c.c module of various types of embedded sensors in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...
The vulnerability of the mpc52xx_spiRemove() function in the driver/spi/spi-mpc52xx.c file of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mpc52xxspiRemove function in the driver/spi/spi-mpc52xx.c file of the Linux kernel’s SPI device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the bpf_jit_prog_releaseother() function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the bpfjitprogreleaseother function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, relates to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the pte_fragDestroy() function in the arch/powerpc/mm/pgtable-frag.c module of the PowerPC platform in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ptefragDestroy function in the arch/powerpc/mm/pgtable-frag.c module of the Linux operating system’s PowerPC platform is related to the state of the race condition when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the mod_hdcp_read_rx_id_list() function in the drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c driver module of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the modhdcpreadrxidlist function in the drivers/gpu/drm/amd/display/modules/hdcp/hdcpddc.c driver module of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the execution of operations outside of the buffer...
The vulnerability of the memcg_reparent_list_lrus() function in the mm/list_lru.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the memcgreparentlistlrus function in the mm/listlru.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
The vulnerability of the ivpu_fw_parse() function in the drivers/accel/ivpu/ivpu_fw.c file of the Linux kernel’s acceleration device driver allows a hacker to cause a system failure.
The vulnerability of the ivpufwparse function in the drivers/accel/ivpu/ivpufw.c file of the Linux kernel’s acceleration device driver relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the nft_tunnel_objdestroy() function in the net/netfilter/nft_tunnel.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfttunnelobjdestroy function in the net/netfilter/nfttunnel.c module of the netfilter component of the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...