196551 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from svcrdma not verifying the RPC/RDMA Read chunk position field provided by the remote client. As a result, integer underflow may occur, potentially exposing adjacent slab memory to the upper-level XDR decoder or causing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the dm-array does not validate the fields of the array block header structure during reading. As a result, out-of-bound reads of the dm-bufio buffer occur when the count exceeds the capacity of the block...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.13 contains a security vulnerability. This vulnerability arises from the lack of verification of the cumulative length of multiple Read segments against the budget of the rqpages array. This may lead to accessing empty pointer slots during DMA mapping, resulting in empt...
Rsyslog buffer error vulnerability
Rsyslog has a buffer error vulnerability. This vulnerability stems from the RainerScript replace function in rsyslog, which incorrectly calculates the buffer size during string replacement. This leads to memory corruption. Unauthorized remote attackers can trigger a heap buffer overflow by sendin...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the lack of verification for allocated pointers in opteeffalendprotmem, which may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 7.1 to 7.1.10 contain security vulnerabilities. These vulnerabilities stem from the use of the zcryptmsgtype6sendep11cprb function, which accesses and modifies the domain field in the EP11 CPRB payload by using a vulnerable struct overlays. Additionally, proper...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions from 2.6.12 to 6.18.57, as well as versions from 2.6.12 to 7.1.10 and from 2.6.12 to 7.2. The vulnerability stems from the ipvsnaticmp function in ipvs, which does not re-validate the ihl field in the embedded IP header read from the sk...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.15 to 7.2 contain security vulnerabilities. These vulnerabilities arise from canceling the IRQ affinity notifier while holding the netdev lock, causing synchronous waiting for callbacks and canceling tasks, which may lead to deadlocks and cause denial of service...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.16 to 6.18.57, 7.1.10 before the release, and 7.2 before the release contain security vulnerabilities. These vulnerabilities stem from the release of the AEAD conversion in RCU callbacks. The cryptofreeaead function may become dormant, which could lead to calls to...
Stolostron acm-operator-bundle software supply chain issue vulnerabilities
The Stolostron acm-operator-bundle has a software supply chain vulnerability. This vulnerability stems from the process of downloading scripts from remote sources during the build process, without verifying their authenticity and integrity. This could allow remote attackers to inject malicious...
Vim code injection vulnerability
Vim has a code injection vulnerability. This vulnerability arises from specially crafted file names that contain quotation characters and expression fragments. The quotation context can be breached during mark/unmark operations, potentially allowing arbitrary Vimscript execution. As a result, she...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the armvsmmuvsidtosid function, which maps the vSID of a guest to a single physical Stream ID without verifying the number of device streams. This may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from boundary checking errors in the fdpcidx function, where the operator is used instead of =. This error allows situations where fdpidx equal to n is accepted as valid...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains a security vulnerability. This vulnerability arises from the error path being returned directly when the mlx5odppopulatexlt function fails. This causes the XLT buffer cleanup to be skipped, leading to DMA mapping and buffer leaks. Additionally, it may cause...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from the capablewrtmount function, which fails to properly handle detached mount points, leading to null pointer dereferencing and potentially causing the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.1 has a security vulnerability. This vulnerability stems from the vhostzerocopycomplete function in drivers/vhost/net.c, which does not properly maintain the ubufinfo reference count, resulting in reusing after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the failure to cancel the work items of pre-allocations when the afs network namespace is removed, which may lead to resources not being released properly...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability arises from a race condition between the device removal and the processing of incoming MLD queries. This can lead to reuse after release, resulting in a kernel crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient checks on the length of IPv6 extension headers in the netfilter ip6tables functions involving the ah, hbh, and rt matching pairs. This may allow malformed packets to bypass the intended discard rules...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from a registration race condition in the HV VHCA stats agent. This condition may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper handling of CPU hot-plug callback errors. The reuse of rollback path return values causes the original errors to be hidden, potentially making failed state transitions appear as successful ones...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from TCP/IPv6 incorrectly not limiting the MSS when the MTU is large. As a result, gsosize may be set to 0xFFFF, and it might be misinterpreted as GSOBYFRAGS. This can lead to a null pointer derefrence exception...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper validation of the length of Bluetooth HCI codec capability elements. This could lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from insufficient boundary checking during the processing of inline data offsets by nvmet-rdma, which may lead to out-of-bound memory reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient validation of the virtqueue index in the mmap and fault paths of vhost/vdpa. It may lead to out-of-bound access, resulting in invalid PFN remapping and crashes/dos...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.6 contains a security vulnerability. This vulnerability stems from the ifedecode function in the net/ife/ife.c file, which does not properly validate the length of the inner Ethernet header. As a result, it may lead to system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from an improper calculation of the Tegra GPC DMA hardware burst size. When the transfer length is not an integer multiple of the configured maximum burst size, DMA suspension may occur, potentially leading ...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from failing to perform range checks on the enumeration indices provided by users, which may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper validation of the offset of the cifs DFS referral string, potentially leading to out-of-bound reading...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.39 has a security vulnerability. This vulnerability stems from an integer overflow issue in the radeon-alignpitch function. It may lead to overflow of signed integers during alignment rounding addition and final calculations, resulting in the return of an invalid pitc...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.7 contains security vulnerabilities. These vulnerabilities stem from mismatches in reserved billing within the hugetlb cgroup, which may lead to underflow of page counters...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient QoS validation, which fails to properly reject ATM traffic categories that exceed ATMANYCLASS. As a result, out-of-bounds read access may occur when reading from /proc/net/atm/pvc...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the lack of checking the return value of nvmettcpsetqueuesock, which may lead to queue and socket leaks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 contains security vulnerabilities. These vulnerabilities stem from the fact that the WQE fields in the non-SRQ receiving path are directly mapped from the shared queue buffer in the user space. This allows malicious users to modify the numsge or sge entries, resulting...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the isoconnectind function in Bluetooth ISO, which accesses iso.pisk-conn during the “ev3” section without acquiring a lock. This may lead to null pointer dereferencing or competition conditions...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the nfsd4 Drop revokedstid function, which lacks handling for SCTYPELAYOUT situations. As a result, when the client sends FREESTATEID, the layout stid is not properly released, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.5 contains a security vulnerability. This vulnerability arises from the lack of checking the ROM header and data structure addresses before accessing PCI ROM data. This could lead to out-of-bounds access, resulting in system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel versions 6.8.2 to 6.9 contain security vulnerabilities. These vulnerabilities stem from the failure to clear the Present bit before removing the extensible mode context entries. This can lead to entries with hardware acquisition tearing and access to released memory, resulting in...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 contains security vulnerabilities. These vulnerabilities stem from a race condition between the interrupt affinity changes and the disabling of LPI, which may lead to reusing resources after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the mbox handling of nixsetrxmode in VF, where it does not check whether the request comes from a VF. When the promiscuous and allmulti flags are set to false, it is possible to accidentally delete PF’s promiscuous and...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.17 contains a security vulnerability. This vulnerability stems from improper allocation of the HV VHCA stats buffer; zero-sized buffers were allocated, which may lead to null pointer dereferencing and cause the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from race conditions in the md/raid5 module, specifically in the breakstripebatchlist and raid5makerequest functions. These race conditions may cause processes to wait indefinitely...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the rungethighestvcn function’s failure to perform length boundary checks when parsing NTFS mapping pairs in the buffer, which may lead to out-of-bounds reads during mounting...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.14 contains a security vulnerability. This vulnerability stems from the rpcrdmaisbcall function in the xprtrdma module, which does not check the buffer boundary when decoding response packets. This leads to out-of-bounds reads. Additionally, the short header processing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from an error in the data type of the scan index handled by the rtw89 driver. This error causes an infinite loop during Wi-Fi scanning at the 6GHz frequency band, potentially leading to kernel softlock and...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.1 contains a security vulnerability. This vulnerability arises from dmearlycreate attempting to release tables that have been instantiated by dmswaptable when dmresume fails, which may lead to kernel anomalies...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the ASoC SOF ipc4-control component not verifying the size of theMODULENOTIFICATION notification payload. This could lead to out-of-bounds read attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from the fact that during peek operations, net/sched/schcodel discards data packets. Before restoring qlen, qdisctreereducebacklog is called, which may lead to the incorrect disabling of parent categories,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the incorrect termination of the netfilter ipset garbage collection mechanism. This could lead to the failure of the garbage collection process to terminate properly...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a missing cleanup call in the error path during the initialization of the dellinit function. This may lead to residual resources such as registered notifiers, debugfs directories, keyboard backlight LEDs, and touchpad LE...