196475 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the BPF map update and deletion paths, which call the bpfobjfreefields function when values are replaced or reclaimed. As a result, the destruction of fields depends on the operation context. In a NMI context, potentiall...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains a security vulnerability. This vulnerability arises from the error path being returned directly when the mlx5odppopulatexlt function fails. This causes the XLT buffer cleanup to be skipped, leading to DMA mapping and buffer leaks. Additionally, it may cause...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from the capablewrtmount function, which fails to properly handle detached mount points, leading to null pointer dereferencing and potentially causing the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.1 has a security vulnerability. This vulnerability stems from the vhostzerocopycomplete function in drivers/vhost/net.c, which does not properly maintain the ubufinfo reference count, resulting in reusing after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the seg6validatesrh function, which reads the fixed SRH field before checking whether the provided length covers the fixed fields. This may allow attackers to trigger out-of-bounds read operations through a specially...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the failure to cancel the work items of pre-allocations when the afs network namespace is removed, which may lead to resources not being released properly...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the md/raid10 driver failing to properly reset readslot when reusing the r10bio for the discard operation. As a result, the replaced bio may not be properly released, leading to resource leaks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from race conditions in BTT lane acquisition. Spinlocks and the per-CPU recursive counting model become ineffective after the lane becomes preemptible. This allows other tasks to bypass locking and concurrently use the same...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the lack of checking the return value of nvmettcpsetqueuesock, which may lead to queue and socket leaks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 contains security vulnerabilities. These vulnerabilities stem from the fact that the WQE fields in the non-SRQ receiving path are directly mapped from the shared queue buffer in the user space. This allows malicious users to modify the numsge or sge entries, resulting...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the isoconnectind function in Bluetooth ISO, which accesses iso.pisk-conn during the “ev3” section without acquiring a lock. This may lead to null pointer dereferencing or competition conditions...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that, during the connection establishment process, when handling malformed MPA requests, the siwsocketdisassoc function separates the socket from its endpoint. This may release the endpoint, and the socket...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the nfsd4 Drop revokedstid function, which lacks handling for SCTYPELAYOUT situations. As a result, when the client sends FREESTATEID, the layout stid is not properly released, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.5 contains a security vulnerability. This vulnerability arises from the lack of checking the ROM header and data structure addresses before accessing PCI ROM data. This could lead to out-of-bounds access, resulting in system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel versions 6.8.2 to 6.9 contain security vulnerabilities. These vulnerabilities stem from the failure to clear the Present bit before removing the extensible mode context entries. This can lead to entries with hardware acquisition tearing and access to released memory, resulting in...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 contains security vulnerabilities. These vulnerabilities stem from a race condition between the interrupt affinity changes and the disabling of LPI, which may lead to reusing resources after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the mbox handling of nixsetrxmode in VF, where it does not check whether the request comes from a VF. When the promiscuous and allmulti flags are set to false, it is possible to accidentally delete PF’s promiscuous and...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.17 contains a security vulnerability. This vulnerability stems from improper allocation of the HV VHCA stats buffer; zero-sized buffers were allocated, which may lead to null pointer dereferencing and cause the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from race conditions in the md/raid5 module, specifically in the breakstripebatchlist and raid5makerequest functions. These race conditions may cause processes to wait indefinitely...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the rungethighestvcn function’s failure to perform length boundary checks when parsing NTFS mapping pairs in the buffer, which may lead to out-of-bounds reads during mounting...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an insufficient length check in the brcmfnotifyauthframerx function when processing short authentication frames. As a result, unsigned subtraction recursion can lead to a stack overflow, potentially allowing a remote...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.14 contains a security vulnerability. This vulnerability stems from the rpcrdmaisbcall function in the xprtrdma module, which does not check the buffer boundary when decoding response packets. This leads to out-of-bounds reads. Additionally, the short header processing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from an error in the data type of the scan index handled by the rtw89 driver. This error causes an infinite loop during Wi-Fi scanning at the 6GHz frequency band, potentially leading to kernel softlock and...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.1 contains a security vulnerability. This vulnerability arises from dmearlycreate attempting to release tables that have been instantiated by dmswaptable when dmresume fails, which may lead to kernel anomalies...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the ASoC SOF ipc4-control component not verifying the size of theMODULENOTIFICATION notification payload. This could lead to out-of-bounds read attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from the fact that during peek operations, net/sched/schcodel discards data packets. Before restoring qlen, qdisctreereducebacklog is called, which may lead to the incorrect disabling of parent categories,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the incorrect termination of the netfilter ipset garbage collection mechanism. This could lead to the failure of the garbage collection process to terminate properly...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a missing cleanup call in the error path during the initialization of the dellinit function. This may lead to residual resources such as registered notifiers, debugfs directories, keyboard backlight LEDs, and touchpad LE...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the fact that the MIPI DSI and CSI domains share clock and reset control bits. This can lead to incorrect behavior when one domain disables shared resources while another domain remains active...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 contains security vulnerabilities. These vulnerabilities stem from integer overflows during the calculation of the TVLV length, which could lead to out-of-bounds access...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the netfilter nfnat module, where an invalid natnet pointer is used when nfnatinit fails, potentially leading to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability caused by improper handling of the RDMACMEVENTADDRCHANGE event. Calling rpcrdmaepput before connection establishment leads to a reference count underflow, which may result in reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the regulatorlocktwo function, which incorrectly uses-EDEADLOCK instead of-EDEADLK when comparing return values. When lock contention occurs, the lock cannot be properly released and retried, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from IPVS’s handling of ICMP errors from tunnels. When using pskbpull, IPVS strips off the external header. However, it does not ensure that the internal IP header is located within the skb headroom, and it does not properly...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from the improper handling of 0 count inputs by the dmafencededuparray function, which may lead to dereferencing uninitialized fence slots...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper cleanup after the failure of adding the Bluetooth MGMTL adv monitor. This may lead to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from accessing isopisk-conn in the isosockgetname function without holding the locksock lock, which may lead to race conditions...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.18 contains a security vulnerability. This vulnerability stems from an error in the tuple deduplication logic of netfilter’s nfconncount function. The error involves incorrect comparison of the connection tracking area; the area direction bit mask is incorrectly passed ...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from PF attempting to process FASTREQUEST or EVENT messages, which may lead to violation of the VFPF ABI protocol and trigger assertions on the PF side...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the TCP application code in IPVS, which continues to assume an IPv4 network header even after the ipvsh parameter is provided. Additionally, the offset of the ICMPV6 header in the ipvsouticmpv6 function is incorrect. Thi...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the handling of the DeleteIndexEntryAllocation function in fs/ntfs3’s doaction function, where insufficient bounds checking of e-size is performed. This leads to an abnormal length parameter for memmove, potentially...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from the iceresetallvfs function, which resets all VFs. During this process, VF resources enabled by the FDIR filter are leaked, and the CTRL VSI is only disabled without proper release of resources...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the tegraahubputvalueenum function reading e-valuesitem0 before checking the range of enumeration values, which may lead to out-of-bounds reading...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper reference counting management of svcxprt during asynchronous TLS handshake callbacks. Competition conditions may occur, potentially leading to reuse after release and kernel memory corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the ipvsconnnew function does not fully reset the ipvsseq structure. As a result, initseq and previousdelta are not initialized. Attackers can exploit this vulnerability by using malicious synchronization...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities stem from TOCTOU issues in the processing of data size in the sofipc3bytesput and sofipc3bytesget functions, which may lead to data truncation or copying of expired bytes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient boundary checking during the traversal of the sofdais array by the createsdwdailinks function, which may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the failure of dmintegritychecklimits, where the locked ranges are not unlocked after the failure, potentially leading to deadlocks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a failure in the linkconf or linksta lookup during the mt7996txprepareskb routine. As a result, the allocated tx tokens are not released when the lookup fails, potentially leading to token leakage...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.20 contains a security vulnerability. This vulnerability stems from the btrfsrundelayedrefs function in btrfs, which does not set lockedref to NULL when handling the-EAGAIN error pointer returned by btrfsselectrefhead. As a result, invalid pointers may be dereferenced,...