Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from an integer overflow issue during the boundary checking of bpfmsgpopdata. This vulnerability may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 6.1.178, 6.6.145, 6.12.97, 6.18.40, and 7.1.5 contain security vulnerabilities. These vulnerabilities stem from SELinux failing to check connection-related permissions when introducing support for TCP Fast Open, allowing for permission bypasses...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.2 contains a security vulnerability. This vulnerability stems from the skbflowdissect function in net/core/flowdissector.c, which does not check the validity of the device type and macheader when requestingFLOWDISSECTORKEYETHADDRS. It also reads the 12-byte data of...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the seg6validatesrh function, which reads the fixed SRH field before checking whether the provided length covers the fixed fields. This may allow attackers to trigger out-of-bounds read operations through a specially...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from improper cleanup after the failure of adding the Bluetooth MGMTL adv monitor. This may lead to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the modification of the rdma-state field in net/9p/transrdma.c without holding the reqlock lock. This leads to a race condition, which may result in reuse after deallocation...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the bcmsendmsg function in the can: bcm module, which reads bo-ifindex and bo-bound without locking them before acquiring a lock. This creates a race condition with functions like bcmnotify and bcmconnect. As a result, t...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the BPF map update and deletion paths, which call the bpfobjfreefields function when values are replaced or reclaimed. As a result, the destruction of fields depends on the operation context. In a NMI context, potentiall...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from the ASoC SOF ipc4-control component not verifying the size of theMODULENOTIFICATION notification payload. This could lead to out-of-bounds read attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that after pskbmaypull reallocates the skb buffer, the unicastpacket pointer is not reassigned, which may lead to reuse after deallocation...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.18 contains a security vulnerability. This vulnerability stems from the kfdcriuresumesvm function, which releases memory without removing nodes from the linked list during the cleanup of criusvmmetadatalist. This could allow a render-group user without privileges to...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from IPVS’s handling of ICMP errors from tunnels. When using pskbpull, IPVS strips off the external header. However, it does not ensure that the internal IP header is located within the skb headroom, and it does not properly...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from a TOCTOU issue in the sofipc4bytesput function. The copy size is based on the old data-size instead of the new data size, which may lead to truncation of valid data or copying of outdated bytes...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from false warnings triggered when writing to the ZCREL2 system register, which may lead to hyppanic...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.0 contains security vulnerabilities. These vulnerabilities stem from NFS incorrectly holding locks during the traversal of the file lock list, which may lead to reusing locks after they have been released...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.38 has a security vulnerability. This vulnerability stems from the pskbmaypull function in the batadvinterfacerx function, which may reallocate the skb buffer. However, the Ethernet header pointer pointing to the old buffer is not reassigned, potentially leading to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities stem from the KVM s390 PCI module, which, when processing AIFs without a specified AISB and with AIF enabled, may store invalid physical addresses in the associated GAITE, potentially causing system anomalies...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the csumpartial function incorrectly using the cksm target address when vector facilities are not available. This could lead to calculating the checksum from address zero...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities are due to improper timing of device mapping releases, which may lead to device mapping leaks at incorrect paths...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from an issue in the xevmcreate function, where the error handling path does not unconditionally call xesvmfini when resv obj allocation fails, resulting in SVM resource leaks...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the ice parser profileinit function not correctly verifying the range of the ptype parameter. As a result, out-of-bounds write operations to the bitmap occur, which may lead to kernel page errors or null pointer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the lack of protection for operations that occur outside of memory regions. This could allow user applications to trigger CQP operations with a mkey value of 0...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.1.6 contain security vulnerabilities. These vulnerabilities arise from the use of xastoreirq to store doorbells, without properly rejecting the assignment of reserved doorbells to new queues. This can lead to the incorrect routing of fence IRQ processing to...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the wacomparseandregister function, which starts the HID hardware before registering inputs and initializing pad LED/remotes. When subsequent steps fail, the error path does not stop the HID hardware before releasing Wac...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the RDS TCP does not the sysctl table before removing the listening sockets. As a result, concurrent sysctl writes compete with the network namespace removal process, leading to the dereferencing of releas...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from xfrm incorrectly updating the skb-prev pointer when processing GSO segments, which may lead to reuse after deallocation...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 6.6.148, 6.12.101, 6.18.42, and 7.1.6 contain security vulnerabilities. These vulnerabilities arise from ksmbd prematurely stopping the copying of ACEs during size calculation overflow, causing the deduplication traversal to exceed the copied ACE array and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.5 contains a security vulnerability. This vulnerability stems from the TAS2781 firmware parser, which does not verify the existence of the terminator of variable-length description strings during parsing, potentially leading to out-of-bounds read attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from improper handling of the error path in the nsmdevioctl function. Unlocking operations are performed without acquiring a mutex, which can lead to kernel lock imbalance errors...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.3 contains security vulnerabilities. These vulnerabilities stem from improper handling of error codes in the smb2aeadreqalloc function, which may lead to a crash when dereferencing invalid error pointers...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from the repeated release of the response buffer during the SMB2close function’s replay process...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the failure of the filsdiscovery allocation process, during which the kfreercu function is called for the old template. If the allocation fails again later, the queued objects are released again, resulting in double...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains a security vulnerability. This vulnerability stems from the l2capsocknewconnectioncb function in Bluetooth L2CAP, which returns chans after releasing the parent lock. This allows other tasks to accept and release the child socket, resulting in reusing the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from the perf/core component failing to properly separate event groups during removeonexec, resulting in corrupted lists of PMU context activities...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from the pkeypckmo handler, which does not check the length of the target buffer. As a result, the generated output data may exceed the size of the target buffer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from an oversight in the PKEYVERIFYPROTK ioctl function, where the buffer length provided by the user space was not checked, potentially leading to a buffer overflow...

Zephyr buffer error vulnerability

Zephyr versions from 3.0.0 to 4.5.0 have a buffer error vulnerability. This vulnerability stems from the user-space verifier zvrfylogfilterset in the subsys/logging/logmgmt.c file. This verifier performs signed comparisons on the int16t srcid parameter. Negative values can bypass the verification...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.11 contains security vulnerabilities. These vulnerabilities stem from the xfs file system, where the data fork mapping is not resampled after the ILOCK cycle, allowing outdated mappings to be used during direct I/O writes...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from a race condition between the dump and ipsetlist functions in netfilter:ipset. This race condition leads to reusing resources after release, potentially causing the kernel to crash...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from a missing rollback logic for the hifont state and the screen buffer in the errout error path of the fbcondosetfont function. As a result, the state machine is damaged, potentially leading to out-of-bounds reads and kerne...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from improper handling of protocol timers before the hdlcppp synchronization releases the hdlc state. This could lead to reuse after the release...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 2.6.32 and earlier contain security vulnerabilities. These vulnerabilities stem from a bug in the ioeventfd datamatch mechanism, specifically the reachability issue with BUGON. This issue may cause the kernel to crash during unaligned accesses...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.20 contains a security vulnerability. This vulnerability arises from the lack of synchronization of the skmsg sg.copy bitmap during the SG conversion process. As a result, externally supported entries may be exposed as writable data in the BPF storage, thereby allowing...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from insufficient checks of the CAPNETADMIN privilege in the device network namespace. This vulnerability could allow attackers to rewrite tunnels in different network namespaces...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from improper management of file references during handshake request processing, which may lead to empty pointer readings or access to released memory...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from nfsd failing to properly clear the IDR slots when processing setlease, resulting in floating pointers. Additionally, the delayedwork not being initialized may trigger undefined behavior. The following versions are...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.19 has a security vulnerability. This vulnerability arises from the handling of IPv6 extension headers. In this process, the ip6parsetlv function caches network header pointers. However, the ipv6desthao function may call pskbexpandhead, which moves the skb header and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a lack of binding of the uarg before filling the zero-copy skb in the vsock/virtio mechanism. This may lead to the use of improperly bound skb during the rollback path, thereby causing resource release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the improper handling of the zero version count for file handles in NFSv4/flexfiles, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the dalvectorreserve function, which uses uint32t integer operations when calculating memory allocation. When values overflow, it silently wraps around to a smaller value, causing krealloc to return a buffer size that is...