Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains a security vulnerability. This vulnerability stems from the btintelpcierecvframe function, where plen is defined as an u16 value. When calculating the sum of HDRSIZE and dlen, an overflow occurs, allowing bypassing the check skb-len plen. This may lead to th...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.30 contains a security vulnerability. This vulnerability arises from the max3100 serial port driver returning values prematurely when the system is suspended. The polling timer is not closed before releasing the port. When the SPI device unlinks before it recovers, it...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities arise from the fact that the IRQ is not stopped before terminating the work queue, resulting in the possibility of the IRQ still scheduling plat-work into the queue when the remove function removes the queue...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has security vulnerabilities. These vulnerabilities stem from insufficient validation of short RX/TX frames and control flows during the processing of Bluetooth BNEP frames. No checks are performed before reading the BNEP header, control type bytes, filter count, a...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities arise when auditing a newly loaded policy. After a policy is published and the inode lock for the newly loaded directory is released, the policy may be concurrently deleted and reloaded. However, the auditing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.16 contains a security vulnerability. This vulnerability arises from the fact that SORESERVEMEM is not limited to TCP sockets, and no upper limit is set. This may lead to concurrent operations on UDP sockets damaging skforwardalloc and memcg accounting, or causing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities arise from modifying the bind file that is published via RCU while clearing expired local sources. When reading the path without locking, it is possible to observe torn IPv6 addresses, leading to address...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.27 has a security vulnerability. This vulnerability arises from the use of sierragetswocinfo, which requests 60-byte SWoC information through usbcontrolmsg. It does not reject short transmissions, resulting in the newly allocated swocinfo buffer being uninitialized at...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the btintelpcie driver, which fails to perform boundary verification on the DMA index frbdtag and crhia provided by the device during the RX path. This may lead to out-of-bounds pointer dereferencing ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.16 contains a security vulnerability. This vulnerability stems from the fact that the st21nfcahcii2crepack function does not verify the size of the received frames. When removing byte padding from deformed frames, data outside the current skb length may be read, resulti...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.10 contains security vulnerabilities. These vulnerabilities arise from the fact that when netdevsetnumtc reduces the numtc, the tctotxq and priotcmap arrays are not cleaned up properly. This leads to netdevtxqtotc returning an out-of-range traffic category. Additionally...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains security vulnerabilities. These vulnerabilities stem from the fact that the adf4377clkregister function does not fully initialize the members of the clkinitdata and clkparentdata structures. Additionally, the init.parentnames and parentdata members are not...

libLAS buffer error vulnerability

LibLAS versions 1.8.1 and earlier have a buffer error vulnerability. This vulnerability arises from the point record reader truncating the schema byte size to 16 bits when calculating the point buffer size. An attacker can create a .las file with a schema exceeding 65,535 bytes, resulting in...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel from 6.18.34 to 6.18.56, as well as 7.0.11 to 7.1 and 7.1 itself, have security vulnerabilities. These vulnerabilities stem from the fprobe processing program executing when RCU does not monitor it. The standard RCU grace period does not wait for these executions, and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.1 contains security vulnerabilities. These vulnerabilities stem from the BPF validation and instruction rewiring process, where signals are not checked and no re-scheduling occurs. A large number of unconditional jumps must be processed one by one, leading to a quadrati...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the kionix-kx022a driver’s improper array boundary checking when converting register values to array indices. As a result, sizeofarray is incorrectly interpreted as the last valid index, potentially...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains a security vulnerability. This vulnerability stems from the data reading function of the rohm-bm1390 driver, which ignores incorrect cached values and returns 0. After the measurement stops, the cached ret value is not returned, potentially leading to the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the fact that adis16400serialnumberfops does not call debugfsfileget, which provides protection against debugging operations on debugfs. As a result, the read operation may release the underlying iiodev...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.5 contains a security vulnerability. This vulnerability arises when the ARP ioctl function copies the struct arpreq provided by the user into the stack object. In this process, the arpdev field may lack a NUL terminator. When checking the device name, the strcmp functio...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability stems from the wacomwacpenserialenforce function, which calculates and passes an invalid offset to hidfieldextract, resulting in out-of-bounds memory access and potentially leading to information leakage...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability stems from the function rtmt6check, which allows the configuration of rtinfo-addrnr to 0 when the request address matches certain conditions. This bypasses the loop termination condition in the IP6TRTFSTNSTRICT path...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities stem from the zpcireportstatus function in the s390/pci framework, which accesses device drivers without acquiring a device lock when pdev is not NULL. This can lead to inconsistent states...

Automatic1111 Stable Diffusion web UI resource management error vulnerability

Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a resource management vulnerability. This vulnerability stems from an improper handling of the header length field parameter in the readmetadatafromsafetensors function within the Metadata Extraction component’s file...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.18 contains a security vulnerability. This vulnerability stems from the s390/cio subsystem, where the ccwdevicegetutilstr function does not check the return value of chpidtochp, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains a security vulnerability. This vulnerability arises from the use of canceldelayedwork, which does not wait for the ongoing work callbacks to complete during the removal process. As a result, the callbacks are executed concurrently with hidhwclose and hidhwsto...

JEECG official open-source JeecgBoot AI low-code platform has a SQL injection vulnerability.

The JEECG official open-source JeecgBoot AI low-code platform versions prior to 3.9.5 have a SQL injection vulnerability. This vulnerability stems from improper handling of newline characters when processing dictionary and online report SQL fragments. Certified attackers can bypass the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the netfs component, which fails to clear the outdated pagecache after writing files through write operations. This may result in residual data from previous writes via mmap being exposed or retained i...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the sctpwaitforconnect function releasing the socket lock during sleep. Additionally, the shutdown mechanism does not check this state before reusing the connection after setting RCVSHUTDOWN. This could lead to the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains a security vulnerability. This vulnerability arises from the thunderbolt driver failing to release the domain reference acquired by tbtunnelonedp when DP RX reading is canceled. When the operation is cancelled, the reference leaks, potentially leading to a...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains a security vulnerability. This vulnerability arises from setting the scanning upper limit of ADE9000ST1CROSSINGDEPTH to 25, without covering the highest event bit ADE9000ST1DIPCBIT bit 25. As a result, Phase C dip events cannot be reported...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from mac80211’s ieee80211vifusereservedswitch function, which incorrectly counts the reserved range during reserved switching. This approach does not ensure that the reserved context matches the current replacement context. A...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.14 contains a security vulnerability. This vulnerability arises from the failure to cancel the PS delivery process promptly when deleting an AP or mesh station. The function stadeliverpsframes only checks sta-dead before delivery. As a result, delayed work threads may...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.26 contains security vulnerabilities. These vulnerabilities stem from race conditions in the tty ioctl and hang-up operations within the USB serial driver. Access to port driver data or hardware occurs without checking whether the port is already hung up. This could...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.10 contains a security vulnerability. This vulnerability stems from the meshpathadd function in net/mac80211/meshpathtbl.c, which does not release the reserved mesh path quotas when path allocation or insertion fails. This can lead to repeated failures or repeated...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 5.15.17 to 5.16, 5.16.3 to 5.17, and 5.17 itself. These vulnerabilities stem from the iio trigger not canceling reenablework before releasing the trigger. The worker that was last started via an ongoing IRQ can continue to run after...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the failure to reset the numnapi count when releasing the napi vector, resulting in null pointer dereferencing within the kernel...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from a race condition in IPv6’s cached routing processing: when listdelinit is executed concurrently, listempty is incorrectly evaluated as true. This leads to the incorrect invocation of dstholdsafe, and...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the function pn533acr122isrxframevalid, which does not validate the frame-ccid.datalen value read from the USB response frame. Instead, it uses this value as an index for frame-data. Malicious or faulty devices can set...

DataStax Starlight for JMS has a vulnerability related to input validation errors

DataStax Starlight for JMS 9.0.3 and earlier versions have a security vulnerability. This vulnerability arises from operations on the decode function in the file Starlight for JMS/src/main/java/com/DataStax/oss/pulsar/jms/messages/PulsarObjectMessage.java, which may lead to deserialization and...

Johannes Kuhlmann cgltf buffer error vulnerability

Johannes Kuhlmann’s cgltf versions prior to 1.15 contain a buffer error vulnerability. This vulnerability stems from the cgltfaccessorunpackfloats function, which advances the cursor based on the byteStride of the base bufferView when handling sparse values. This allows for heap out-of-bound...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities arise from failing to clear buf-page after a napibuildskb failure. As a result, stmmacrxrefill skips the allocation process and reassigns the recycled page to the RX descriptor, potentially leading to...

Ravi Teja Online-Examination-System Input Verification Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from the incorrect handling of the topicid parameter in the Exam::startExam function within the exam.php file in the Exam Module component. This could lead to SQL injection attacks, and attackers could...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.3 has a security vulnerability. This vulnerability stems from the use of hcichansent, which accesses chan-conn after releasing the RCU read lock and returns the channel. The ACL and LE scheduler utilize their data packet queues and update the send counter even when...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability originates from the nv1aramnew function in the drm/nouveau driver. After the pcigetdomainbusandslot function retrieves the PCI device reference, it does not release the reference after reading the configuration...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains security vulnerabilities. These vulnerabilities stem from the addressspace of the first opener of /dev/kfd in the kfddevmapping cache. In multi-container scenarios with SRIOV, there are issues such as deadlocks during semaphore read and write operations after...

Vanus-Labs Vanus Trust Management Vulnerability

In the versions of Vanus-Labs’ Vanus from 0.8.0 to 0.9.0, there are security vulnerabilities related to trust management. These vulnerabilities stem from the use of default credentials and a hardcoded admin token. This allows unauthenticated remote attackers to obtain cluster-admin access rights...

ProjectSend authorization issue vulnerability

The ProjectSend version 2.0.0 to 2.7.0 had an authorization issue vulnerability. This vulnerability stemmed from improper authorization. Users who possess restricted API tokens were able to change the token owner credentials via the PATCH /api/v1/users/user endpoint. Only tokens with the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from a lack of synchronization in the allocbulk function of bpf when processing lists like waitingforgpttrace and freebyrcuttrace concurrently. This leads to race conditions and allows for reuse of resource...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the EDAC/altera driver, which marks the setup callback and auxiliary functions of a10 EDAC as init. These functions may execute after memory release during the probe path, resulting in the dereferencing of already releas...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains a security vulnerability. This vulnerability stems from the lack of migration protection in rhtabmaplookupanddeletebatch. Under CONFIGPREEMPTRCU, only rcureadlock is used without disabling migration. Tasks involved in the deletion process can be migrated...