Linux Kernel Security Vulnerabilities

The Linux kernel version 3.0 contains security vulnerabilities. These vulnerabilities arise from the lack of initialization of the IRQ state, MMIO address, and spinlock before requesting the alarm IRQ. Additionally, devmrequestirq enables the interrupt before returning, which may cause the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability. This vulnerability arises from the fact that the gaccessshadowfault function in KVM s390 does not handle the situation where nested client memory pages do not exist in the parent client’s gmap. Additionally, the datentrywalk function...

Beau Gunderson ip-address resource management error vulnerability

Beau Gunderson’s IP-address version prior to 10.7.4 contains a resource management error vulnerability. This vulnerability arises from functions that accept inputs containing a large number of '%' characters and invoke the Address6 constructor function. This leads to a quadratic complexity, causi...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains a security vulnerability. This vulnerability stems from emmactxmemmap in drivers/net/ethernet/spacemit/k1emac.c, which fails to clear the written TX descriptors when fragment mapping fails. As a result, the DMA engine may access an old address that has been...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions from 5.10.258 to 5.11, from 5.15.165 to 5.16, from 6.1.105 to 6.2, from 6.6.46 to 6.7, from 6.10.5 to 6.11, and version 6.11. The vulnerability arises from the failure of the dcstatecreatecopy function to return a value, resulting in NU...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 5.15.17 to 5.16, 5.16.3 to 5.17, and 5.17 itself. These vulnerabilities stem from the iio trigger not canceling reenablework before releasing the trigger. The worker that was last started via an ongoing IRQ can continue to run after...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains a security vulnerability. This vulnerability arises from the fact that the stackslotobjgetspi function does not reject non-negative offsets. When the offset is 0, the calculated spi index is the same as the valid stack slot at fp-8. This may lead to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains a security vulnerability. This vulnerability stems from the improper timing of releasing the mapping for each PHY interrupt in the .remove function of the mt7530removecommon. The regmap-irq chip uses devm for registration, and the parent interrupt is only...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.18 has a security vulnerability. This vulnerability arises from the optional attribute FOUATTRIPPROTO. When this attribute is omitted in the FOUENCAPDIRECT mode, it is not checked whether the protocol value is 0. As a result, fouudprecv returns 0, causing skbuff not to ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from a race condition that occurs during the attachperfctxdata function in perf/core when the global and !global conditions are involved. This race condition may lead to a leak of the reference count if th...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.10 contains a security vulnerability. This vulnerability arises from handling empty FILS-related request payloads, where zero-length allocations return ZEROSIZEPTR. In this process, sginitone places invalid pages into the scatterlist, which may trigger a kernel bug or...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from a lack of synchronization in the allocbulk function of bpf when processing lists like waitingforgpttrace and freebyrcuttrace concurrently. This leads to race conditions and allows for reuse of resource...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.1 contains a security vulnerability. This vulnerability stems from the use of the TCP header length incorrectly in UDP GSO packets by the gvecansendtso function. This leads to an incorrect estimation of the number of segmentation buffers, potentially causing unnecessary...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.13 contains security vulnerabilities. These vulnerabilities stem from an error in the update order of NACL firewall entries. The Config field is written first, resulting in pending entries that are observed by the SBI implementation or the NACL hardware. This leads to...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises when SCTP processes bundled packets that contain outdated Cookie errors. As a result of this error, the non-primary transmission is deleted, but the subsequent DATA blocks still reference the deleted transmission. This allow...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the use of flowoffloadworkdel, which releases NFFLOWHWDEAD before the work thread has cleared NFFLOWHWPENDING. This concurrent garbage collection may cause the flow to be released prematurely, leading t...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability arises when the devmthermalofzoneregister function fails, and the I/O mapping array is not unmapped before the probe is returned, or the runtime PM is not disabled. This may lead to resources being not released...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.18 contains security vulnerabilities. These vulnerabilities stem from the fact that the tcpwritecollapsefence function does not take effect when skwritequeue is empty. This may lead to the merging of skb packets across device encryption boundaries during retransmission ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the use of st-lock serialization transactions in the access path to AXI ADC registers. However, the detection function does not initialize this mutual exclusion lock before registering it with the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from the use of adsdbufferpostenable, which allocates samplesbuf during runtime. However, when unbinding the buffer, it is released before the IRQ is disabled. As a result, the handler may still copy samples...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the BPF JIT compiler generating the addu instruction instead of the addiu instruction for the immediate numerical JMP JEQ/JNE instructions in MIPS32. As a result, the immediate value 1 is interpreted as the register $at...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.11 contains security vulnerabilities. These vulnerabilities stem from the use of virtiogpuresourcecreateblobioctl in the error paths of virtiogpuresourceassignuuid and drmgemhandlecreate. This leads to the call of drmgemobjectrelease, which does not release the referenc...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the fact that the perfclearbranchentrybitfields function does not clean up the newtype and priv fields properly. As a result, uninitialized kmalloc data or previously recorded values may be leaked into...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains a security vulnerability. This vulnerability arises from the use of an invalid pstate pointer after the nvkmclkustateupdate function does not hit a break in the listforeachentry loop. In user space, it is possible to request an non-existent pstate ID through...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from rdsibmapfrmr failing to clear the scatterlist in the MR when DMA mapping fails. As a result, floating pointers and reusing memory after release may lead to an increase in local privileges...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities arise when auditing a newly loaded policy. After a policy is published and the inode lock for the newly loaded directory is released, the policy may be concurrently deleted and reloaded. However, the auditing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.14 contains a security vulnerability. This vulnerability arises from the fact that the gvepreptso function does not enforce the check that the MSS of TSO messages does not exceed 9728, and it also does not validate the gsosize of non-local-generated messages. As a resul...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from nftables not skipping expired elements when inserting or deleting catchall elements. As a result, expired elements become invisible but still prevent reinsertion or incorrect deactivation of elements...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.7 contains security vulnerabilities. These vulnerabilities stem from synchronization conflicts between nfcllcpsocketrelease and nfcllcpacceptdequeue. This can lead to concurrent deconnection and the release of the same sub-socket. As a result, the socket may be reused...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.8 has a security vulnerability. This vulnerability arises from the fact that the function ipv6findhdr does not verify whether the length of the extended header exceeds the end of the packet. As a result, the offset may point outside the packet’s end. In this case,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.11 contains security vulnerabilities. One of these vulnerabilities arises from sockmapalloc, which does not reject entries greater than INTMAX. Additionally, sockmapfree uses a signed int to iterate through the sks array, leading to integer overflows and potential...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 5.15.137 to 5.16, 6.1.60 to 6.2, and 6.2 itself. These vulnerabilities stem from the function iiodeviceunregister, which disables all buffers without acquiring mlock. This can lead to the buffer state including activescanmask becoming...

Automatic1111 Stable Diffusion web UI input validation error vulnerability

Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from the improper handling of the Target parameter in the getobjfromstr function located in the modules/sdmodels.py file. It may lead to code injection, allowing attackers to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.2 contains a security vulnerability. This vulnerability arises from the premature release of backreferences when associating with non-transmission MBSSID configuration files. Subsequently, the same element pointers are still used to determine the working channel,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has security vulnerabilities. These vulnerabilities stem from the fact that the LBLCR and LBLC caches in ipvs are not limited in their growth. Functions like ipvslblcrnew and ipvslblcnew create cache entries for each unseen target address. However, maxsize only...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 has a security vulnerability. This vulnerability stems from the threaded IRQ handler in the gp2ap020a00f driver, which queues data-work through the irqworkqueue. However, the freeirq function does not refresh the queued irwork, resulting in the work continuing to run...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the function pn533acr122isrxframevalid, which does not validate the frame-ccid.datalen value read from the USB response frame. Instead, it uses this value as an index for frame-data. Malicious or faulty devices can set...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from a race condition in IPv6’s cached routing processing: when listdelinit is executed concurrently, listempty is incorrectly evaluated as true. This leads to the incorrect invocation of dstholdsafe, and...

AbiWord wv buffer error vulnerability

AbiWord versions 1.2.9 and earlier have a buffer error vulnerability. This vulnerability stems from the wvGetSTSH function in stylesheet.c, which involves heap-based out-of-bounds read operations. Attackers can exploit this vulnerability by providing custom Word style sheets or.doc files containi...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.3 contains security vulnerabilities. These vulnerabilities arise from adding pointers to the extended area into the expected list when calling auxiliary functions. Subsequent reallocations of space after adding extensions cause the pointers to become invalid. Accessing...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the atl1 driver’s improper handling of the out-of-bounds cmbtpdnexttoclean value reported by hardware during PCIe link/mac reset operations. This could lead to loops that cannot be exited, resulting in a soft lock...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains a security vulnerability. This vulnerability stems from the data reading function of the rohm-bm1390 driver, which ignores incorrect cached values and returns 0. After the measurement stops, the cached ret value is not returned, potentially leading to the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from improper lifecycle management of TE GPIO in the samsung-dsim driver. When the DSI host is detached or reattached, the GPIO is not released, potentially leading to repeated requests for the GPIO...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities arise from modifying the bind file that is published via RCU while clearing expired local sources. When reading the path without locking, it is possible to observe torn IPv6 addresses, leading to address...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains a security vulnerability. This vulnerability stems from the KVM arm64 nv module, which encounters a race condition with stage 2 teardown when handling nested wp/unmap operations. The module does not check whether pgt is empty, which may lead to null pointer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from the firmware parser’s ability to read lengths from binary headers and then use those lengths to traverse six-byte register/value entries. Truncated firmware images may cause the parser to read values...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains security vulnerabilities. These vulnerabilities stem from the ethtool IOCTL self-test path, which only holds a netdev lock on the ops-locked driver but not a rtnllock. During offline self-tests, when interfaces are closed and reopened using...

Johannes Kuhlmann cgltf buffer error vulnerability

Johannes Kuhlmann’s cgltf versions prior to 1.15 contain a buffer error vulnerability. This vulnerability stems from the cgltfaccessorunpackfloats function, which advances the cursor based on the byteStride of the base bufferView when handling sparse values. This allows for heap out-of-bound...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 5.10.266 to 5.11, 5.15.217 to 5.16, and 7.2 contain security vulnerabilities. These vulnerabilities stem from a race condition between the tbremovework and tbdomainremove functions in the Thunderbolt driver. The tbfreeunpluggedxdomains function is called without checking...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from the BPF LSM program, which modifies extended attributes without holding an inode lock during the pathunlink/pathrmdir hooks, potentially leading to race conditions...