196327 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the rungethighestvcn function’s failure to perform length boundary checks when parsing NTFS mapping pairs in the buffer, which may lead to out-of-bounds reads during mounting...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 contains security vulnerabilities. These vulnerabilities stem from a race condition between the interrupt affinity changes and the disabling of LPI, which may lead to reusing resources after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from PF attempting to process FASTREQUEST or EVENT messages, which may lead to violation of the VFPF ABI protocol and trigger assertions on the PF side...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the TCP application code in IPVS, which continues to assume an IPv4 network header even after the ipvsh parameter is provided. Additionally, the offset of the ICMPV6 header in the ipvsouticmpv6 function is incorrect. Thi...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper handling of CPU hot-plug callback errors. The reuse of rollback path return values causes the original errors to be hidden, potentially making failed state transitions appear as successful ones...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.14 contains a security vulnerability. This vulnerability stems from the rpcrdmaisbcall function in the xprtrdma module, which does not check the buffer boundary when decoding response packets. This leads to out-of-bounds reads. Additionally, the short header processing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.17 contains a security vulnerability. This vulnerability stems from improper allocation of the HV VHCA stats buffer; zero-sized buffers were allocated, which may lead to null pointer dereferencing and cause the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from the capablewrtmount function, which fails to properly handle detached mount points, leading to null pointer dereferencing and potentially causing the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the indxfindbuffer function in fs/ntfs3, which recursively traverses the B+-tree index without a depth limit, potentially leading to system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the ntfs3 driver not correctly limiting the tomove size in the indxinsertintoroot function, which may lead to uncontrolled out-of-bounds writes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper validation of the length of Bluetooth HCI codec capability elements. This could lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the tegraahubputvalueenum function reading e-valuesitem0 before checking the range of enumeration values, which may lead to out-of-bounds reading...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from a registration race condition in the HV VHCA stats agent. This condition may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the regulatorlocktwo function, which incorrectly uses-EDEADLOCK instead of-EDEADLK when comparing return values. When lock contention occurs, the lock cannot be properly released and retried, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from failing to perform range checks on the enumeration indices provided by users, which may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability arises from a race condition between the device removal and the processing of incoming MLD queries. This can lead to reuse after release, resulting in a kernel crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from IPVS’s handling of ICMP errors from tunnels. When using pskbpull, IPVS strips off the external header. However, it does not ensure that the internal IP header is located within the skb headroom, and it does not properly...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient validation of the virtqueue index in the mmap and fault paths of vhost/vdpa. It may lead to out-of-bound access, resulting in invalid PFN remapping and crashes/dos...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper validation of the offset of the cifs DFS referral string, potentially leading to out-of-bound reading...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient checks on the length of IPv6 extension headers in the netfilter ip6tables functions involving the ah, hbh, and rt matching pairs. This may allow malformed packets to bypass the intended discard rules...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.6 contains a security vulnerability. This vulnerability stems from the ifedecode function in the net/ife/ife.c file, which does not properly validate the length of the inner Ethernet header. As a result, it may lead to system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient QoS validation, which fails to properly reject ATM traffic categories that exceed ATMANYCLASS. As a result, out-of-bounds read access may occur when reading from /proc/net/atm/pvc...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from insufficient boundary checking during the processing of inline data offsets by nvmet-rdma, which may lead to out-of-bound memory reads...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.7 contains security vulnerabilities. These vulnerabilities stem from mismatches in reserved billing within the hugetlb cgroup, which may lead to underflow of page counters...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the handling of the DeleteIndexEntryAllocation function in fs/ntfs3’s doaction function, where insufficient bounds checking of e-size is performed. This leads to an abnormal length parameter for memmove, potentially...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from the iceresetallvfs function, which resets all VFs. During this process, VF resources enabled by the FDIR filter are leaked, and the CTRL VSI is only disabled without proper release of resources...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the tipcdisablel2media function, which calls synchronizenet when b-mediaptr is still valid. As a result, concurrent RCU readers can still access the device pointer after it has been cleared, leading to reuse of the freed...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.1 has a security vulnerability. This vulnerability stems from the vhostzerocopycomplete function in drivers/vhost/net.c, which does not properly maintain the ubufinfo reference count, resulting in reusing after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the ipvsconnnew function does not fully reset the ipvsseq structure. As a result, initseq and previousdelta are not initialized. Attackers can exploit this vulnerability by using malicious synchronization...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from TCP/IPv6 incorrectly not limiting the MSS when the MTU is large. As a result, gsosize may be set to 0xFFFF, and it might be misinterpreted as GSOBYFRAGS. This can lead to a null pointer derefrence exception...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from an improper calculation of the Tegra GPC DMA hardware burst size. When the transfer length is not an integer multiple of the configured maximum burst size, DMA suspension may occur, potentially leading ...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from an integer overflow issue during the boundary checking of bpfmsgpopdata. This vulnerability may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 6.1.178, 6.6.145, 6.12.97, 6.18.40, and 7.1.5 contain security vulnerabilities. These vulnerabilities stem from SELinux failing to check connection-related permissions when introducing support for TCP Fast Open, allowing for permission bypasses...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the seg6validatesrh function, which reads the fixed SRH field before checking whether the provided length covers the fixed fields. This may allow attackers to trigger out-of-bounds read operations through a specially...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities stem from the KVM s390 PCI module, which, when processing AIFs without a specified AISB and with AIF enabled, may store invalid physical addresses in the associated GAITE, potentially causing system anomalies...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the lack of protection for operations that occur outside of memory regions. This could allow user applications to trigger CQP operations with a mkey value of 0...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.1.6 contain security vulnerabilities. These vulnerabilities arise from the use of xastoreirq to store doorbells, without properly rejecting the assignment of reserved doorbells to new queues. This can lead to the incorrect routing of fence IRQ processing to...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 6.6.148, 6.12.101, 6.18.42, and 7.1.6 contain security vulnerabilities. These vulnerabilities arise from ksmbd prematurely stopping the copying of ACEs during size calculation overflow, causing the deduplication traversal to exceed the copied ACE array and...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the wacomparseandregister function, which starts the HID hardware before registering inputs and initializing pad LED/remotes. When subsequent steps fail, the error path does not stop the HID hardware before releasing Wac...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the RDS TCP does not the sysctl table before removing the listening sockets. As a result, concurrent sysctl writes compete with the network namespace removal process, leading to the dereferencing of releas...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the ice parser profileinit function not correctly verifying the range of the ptype parameter. As a result, out-of-bounds write operations to the bitmap occur, which may lead to kernel page errors or null pointer...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities are due to improper timing of device mapping releases, which may lead to device mapping leaks at incorrect paths...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from an issue in the xevmcreate function, where the error handling path does not unconditionally call xesvmfini when resv obj allocation fails, resulting in SVM resource leaks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from xfrm incorrectly updating the skb-prev pointer when processing GSO segments, which may lead to reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the csumpartial function incorrectly using the cksm target address when vector facilities are not available. This could lead to calculating the checksum from address zero...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.5 contains a security vulnerability. This vulnerability stems from the TAS2781 firmware parser, which does not verify the existence of the terminator of variable-length description strings during parsing, potentially leading to out-of-bounds read attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the repeated release of the response buffer during the SMB2close function’s replay process...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.3 contains security vulnerabilities. These vulnerabilities stem from improper handling of error codes in the smb2aeadreqalloc function, which may lead to a crash when dereferencing invalid error pointers...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the failure of the filsdiscovery allocation process, during which the kfreercu function is called for the old template. If the allocation fails again later, the queued objects are released again, resulting in double...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from the perf/core component failing to properly separate event groups during removeonexec, resulting in corrupted lists of PMU context activities...