196551 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability caused by improper handling of the RDMACMEVENTADDRCHANGE event. Calling rpcrdmaepput before connection establishment leads to a reference count underflow, which may result in reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the regulatorlocktwo function, which incorrectly uses-EDEADLOCK instead of-EDEADLK when comparing return values. When lock contention occurs, the lock cannot be properly released and retried, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from IPVS’s handling of ICMP errors from tunnels. When using pskbpull, IPVS strips off the external header. However, it does not ensure that the internal IP header is located within the skb headroom, and it does not properly...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.18 contains a security vulnerability. This vulnerability stems from an error in the tuple deduplication logic of netfilter’s nfconncount function. The error involves incorrect comparison of the connection tracking area; the area direction bit mask is incorrectly passed ...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from PF attempting to process FASTREQUEST or EVENT messages, which may lead to violation of the VFPF ABI protocol and trigger assertions on the PF side...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the handling of the DeleteIndexEntryAllocation function in fs/ntfs3’s doaction function, where insufficient bounds checking of e-size is performed. This leads to an abnormal length parameter for memmove, potentially...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the tegraahubputvalueenum function reading e-valuesitem0 before checking the range of enumeration values, which may lead to out-of-bounds reading...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper reference counting management of svcxprt during asynchronous TLS handshake callbacks. Competition conditions may occur, potentially leading to reuse after release and kernel memory corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities stem from TOCTOU issues in the processing of data size in the sofipc3bytesput and sofipc3bytesget functions, which may lead to data truncation or copying of expired bytes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient boundary checking during the traversal of the sofdais array by the createsdwdailinks function, which may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the failure of dmintegritychecklimits, where the locked ranges are not unlocked after the failure, potentially leading to deadlocks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.20 contains a security vulnerability. This vulnerability stems from the btrfsrundelayedrefs function in btrfs, which does not set lockedref to NULL when handling the-EAGAIN error pointer returned by btrfsselectrefhead. As a result, invalid pointers may be dereferenced,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a race condition in the makeuffdwphugepte function located in fs/proc/taskmmu.c during updates to prot, which may lead to the loss of hardware Dirty/Accessed updates...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an error in calculating the allocation size of the flexible array element currentpath within the nvmenshead structure. In systems with sparse NUMA node IDs, this could lead to out-of-array access, resulting in system...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.5 contains security vulnerabilities. These vulnerabilities stem from repeated requests for WC pages with the same ucontext, which may lead to concurrent access issues...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the ntfs3 driver not correctly limiting the tomove size in the indxinsertintoroot function, which may lead to uncontrolled out-of-bounds writes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the tipcdisablel2media function, which calls synchronizenet when b-mediaptr is still valid. As a result, concurrent RCU readers can still access the device pointer after it has been cleared, leading to reuse of the freed...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the indxfindbuffer function in fs/ntfs3, which recursively traverses the B+-tree index without a depth limit, potentially leading to system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from an integer overflow issue during the boundary checking of bpfmsgpopdata. This vulnerability may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper handling of the state of the addrconfdadfailure function in the ipv6 addrconf module. When addresses are deleted concurrently, it is possible to access already released list items, leading to a kernel crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the iSCSI ISID is dereferenced after the REGISTER AND MOVE operation but is still referenced afterward. As a result, it can be reused after being released, potentially leading to memory information leaks o...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the vxlangropreparereceive function does not check whether skuserdata is empty. This value may be set to NULL by the udptunnelsockrelease function, which could lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the zappages function, which fails to correctly acquire the mmaplock when calling zapvmarange. There is a lock order issue, which may lead to deadlocks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from incorrect initialization of the device’s RB-tree node. If the device does not support ATS, the insertion operation is skipped. In subsequent detection attempts, the error path initializes the node to...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 6.1.178, 6.6.145, 6.12.97, 6.18.40, and 7.1.5 contain security vulnerabilities. These vulnerabilities stem from SELinux failing to check connection-related permissions when introducing support for TCP Fast Open, allowing for permission bypasses...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.2 contains a security vulnerability. This vulnerability stems from the skbflowdissect function in net/core/flowdissector.c, which does not check the validity of the device type and macheader when requestingFLOWDISSECTORKEYETHADDRS. It also reads the 12-byte data of...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the seg6validatesrh function, which reads the fixed SRH field before checking whether the provided length covers the fixed fields. This may allow attackers to trigger out-of-bounds read operations through a specially...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper cleanup after the failure of adding the Bluetooth MGMTL adv monitor. This may lead to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from a cancellation race condition in svctcphandshake. This condition may cause the xptflags variable to be read before it has been submitted as a callback. As a result, handshake calls may be called...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the ipvsconnnew function does not fully reset the ipvsseq structure. As a result, initseq and previousdelta are not initialized. Attackers can exploit this vulnerability by using malicious synchronization...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the fact that the MIPI DSI and CSI domains share clock and reset control bits. This can lead to incorrect behavior when one domain disables shared resources while another domain remains active...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the TCP application code in IPVS, which continues to assume an IPv4 network header even after the ipvsh parameter is provided. Additionally, the offset of the ICMPV6 header in the ipvsouticmpv6 function is incorrect. Thi...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the netfilter nfnat module, where an invalid natnet pointer is used when nfnatinit fails, potentially leading to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an insufficient length check in the brcmfnotifyauthframerx function when processing short authentication frames. As a result, unsigned subtraction recursion can lead to a stack overflow, potentially allowing a remote...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a failure in the linkconf or linksta lookup during the mt7996txprepareskb routine. As a result, the allocated tx tokens are not released when the lookup fails, potentially leading to token leakage...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 contains security vulnerabilities. These vulnerabilities stem from integer overflows during the calculation of the TVLV length, which could lead to out-of-bounds access...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from the improper handling of 0 count inputs by the dmafencededuparray function, which may lead to dereferencing uninitialized fence slots...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from accessing isopisk-conn in the isosockgetname function without holding the locksock lock, which may lead to race conditions...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.0 contains security vulnerabilities. These vulnerabilities stem from NFS incorrectly holding locks during the traversal of the file lock list, which may lead to reusing locks after they have been released...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.2 contains a security vulnerability. This vulnerability stems from the use of the testbit function in the hash-based lock-free RCU reader in netfilter ipset. This function is a relaxed atomic operation and does not provide memory barrier guarantees. When it operates...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from the iceresetallvfs function, which resets all VFs. During this process, VF resources enabled by the FDIR filter are leaked, and the CTRL VSI is only disabled without proper release of resources...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains a security vulnerability. This vulnerability stems from the kfdcriuresumesvm function, which releases memory without removing nodes from the linked list during the cleanup of criusvmmetadatalist. This could allow a render-group user without privileges to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.23 has a security vulnerability. This vulnerability arises from insufficient initialization of the lockwork work queue during the re-initialization of the afs inode, which may lead to system warnings...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from a TOCTOU issue in the sofipc4bytesput function. The copy size is based on the old data-size instead of the new data size, which may lead to truncation of valid data or copying of outdated bytes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the modification of the rdma-state field in net/9p/transrdma.c without holding the reqlock lock. This leads to a race condition, which may result in reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.7 contains a security vulnerability. This vulnerability arises from KVM arm64 vgic not checking whether the interrupt still belongs to the current vCPU during interrupt migration. This could lead to double release, resulting in system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.38 has a security vulnerability. This vulnerability stems from the pskbmaypull function in the batadvinterfacerx function, which may reallocate the skb buffer. However, the Ethernet header pointer pointing to the old buffer is not reassigned, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the bcmsendmsg function in the can: bcm module, which reads bo-ifindex and bo-bound without locking them before acquiring a lock. This creates a race condition with functions like bcmnotify and bcmconnect. As a result, t...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that after pskbmaypull reallocates the skb buffer, the unicastpacket pointer is not reassigned, which may lead to reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from false warnings triggered when writing to the ZCREL2 system register, which may lead to hyppanic...