197709 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the bnxt driver not writing to the doorbell when SW USO path returns NETDEVTXBUSY prematurely, which may cause the TX queue to become stalled...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that file range information in fanotify is triggered during task stack construction. After the event is canceled, the reader still accesses stack memory that has been released, leading to reutilization of that...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.19 contains security vulnerabilities. These vulnerabilities arise from the fact that after the picktask function releases the rq lock, the selected state cannot remain valid indefinitely. Cross-selecting can lead to inconsistent states and deviations in forceidle...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains a security vulnerability. This vulnerability stems from the ksetreplay function in dm-pcache. When the key-seggen expires, the cachepos.cacheseg is still accessed as a parameter for cachesegget, resulting in reusing it after it has been released. As a result...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the i3cdevicegetsupportedxfermode function, which dereferences dev-desc without holding the bus-lock lock. This may lead to race conditions or illegal pointer access...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the mctproutelookup function using rt-dev without holding a routing device reference, which may lead to reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains a security vulnerability. This vulnerability stems from the use of QoS TIDs without proper checking in the function rtl92dutxfilldesc. This can lead to out-of-array indexing attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that arises from failing to hold the cpubuffer::lock when adjusting the size of the subbuffer. This may lead to race conditions with the ringbufferallocreadpage and ringbufferfreereadpage functions...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains a security vulnerability. This vulnerability arises from the use of adii3cmasterprobe, which requests the IRQ and cancels the masking of REGIRQPENDINGCMDR before initializing the controller IBI status, the transfer queue list, and the transfer queue lock. As...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains a security vulnerability. This vulnerability stems from the dm-pcache’s cacheposdecode function, which retrieves persistent keytail and dirtytail segoff from the cache device and uses them for intersegment addressing. It does not reject decoding of segoff...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the asynchronous notifier failing to unregister and clean up erroneous paths, resulting in the notifier remaining linked in the global notifierlist. As a result, the ipu7isys structure is released, causing the linked lis...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a typo in the acpipccretrievebiosdata function, which allows for out-of-bounds writing to the pcc-sinf array, potentially leading to a stack overflow...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the ucmawritecmevent function in RDMA/ucma does not access ctx-file under program lock, leading to a race condition with the ucmamigrateid migration. This results in listadd being corrupted and the mutex lo...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the s390/percpu MVIYPERCPU macro. When old versions of binutils are used, the whitespace between quoted parameters is discarded, leading to an error in the assembly macro parameter parsing. As a result, the mviy...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains a security vulnerability. This vulnerability stems from the ipmiDestroyUser function, which lacks a synchronizeRCU grace period before releasing the cmdrcvr receiver. As a result, the cmdrcvr list is still traversed within the RCU read critical section,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from the fact that tegra241vintfinitvsid does not verify the width of the SIDATCHECK field for the vSID provided by the guest. This may lead to values being truncated and matching to the wrong Stream ID...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from the fact that the fwctlcmdrpc function does not check the opsize parameter controlled by the user, allowing for out-of-bounds reads, which may lead to kernel crashes or information leaks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the cachereplay function in dm-pcache, as well as the write-back worker threads and GC worker threads. In these functions, the length of the tail read from kset is determined by PCACHESEGSIZE - segoff...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities stem from the fact that functions smcllcrmtdeleterkey and smcllcsaveaddlinkrkeys do not apply proper boundary checks based on the actual length of the messages received. This allows for out-of-bounds reads,...
Container Bubblewrap Postback Link Vulnerability
The Bubblewrap container has a post-installation link vulnerability. This vulnerability stems from the ability to follow parent symbolic links through /oldroot during the creation of files or directories during Bubblewrap sandbox settings. This could allow an attacker to write the selected path...
OpenPrinting CUPS: CUPS input validation error vulnerability
OpenPrinting CUPS has a vulnerability in input validation. This vulnerability stems from the CUPS scheduler’s failure to properly validate usernames during the printer ACL verification and private attribute filtering, when the path exceeds the main authorization path. As a result, the comparison ...
Eleveo Quality Management Resource Management Error Vulnerability
Eleveo Quality Management version 9.7.0 has a resource management vulnerability. This vulnerability stems from improper handling of the labels parameter in the /enc-fwk-data/api/v3/conversations//events file by the Conversation Handler component, which may lead to a remote denial-of-service attac...
Eleveo Quality Management Cross-Site Scripting Vulnerability
Eleveo Quality Management version 9.7.0 has a security vulnerability. This vulnerability stems from a cross-site scripting vulnerability in the Conversation Review component. Attackers may exploit this vulnerability remotely...
Eleveo Quality Management processing logic error vulnerability
Eleveo Quality Management version 9.7.0 has a security vulnerability. This vulnerability stems from the operation of the parameter createdBy in the Conversation Handler component, which allows dynamic determination of object properties. This could potentially allow remote attackers to exploit thi...
Submariner Operator Code Injection Vulnerability
The Submariner Operator has a code injection vulnerability. This vulnerability stems from the use of free-form strings from custom resource definitions CRDs in connection configurations under the cert-auth mode, without proper validation. Attackers can exploit this to inject arbitrary configurati...
SmallRye has a vulnerability related to input validation.
SmallRye has a vulnerability in input validation. This vulnerability stems from the improper validation of floating-point or string inputs during the forced conversion of BigInteger numeric scalars in SmallRye’s GraphQL queries. This allows unauthenticated remote attackers to send GraphQL queries...
Rsyslog buffer error vulnerability
Rsyslog has a buffer error vulnerability. This vulnerability stems from the RainerScript replace function in rsyslog, which incorrectly calculates the buffer size during string replacement. This leads to memory corruption. Unauthorized remote attackers can trigger a heap buffer overflow by sendin...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.16 to 6.18.57, 7.1.10 before the release, and 7.2 before the release contain security vulnerabilities. These vulnerabilities stem from the release of the AEAD conversion in RCU callbacks. The cryptofreeaead function may become dormant, which could lead to calls to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from multiple insecure decoding operations in the decodelocker function of libceph. No checks are performed on the boundaries of the decoded data, which may allow malicious or infected OSDs to trigger slab overflows, leading ...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the clsbpf module in net/sched, which does not verify whether the bound netdev of the SCHEDCLS process is matched with the target TC netdev. This allows a program on device A to be attached to device B through clsbpf and...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the u32bindclass function does not check the type of the passed parameter fh. As a result, tcuhnode is forced to tcuknode, and the res member is accessed. This leads to an out-of-bounds read of res-classid...
Linux Kernel Security Vulnerabilities
The Linux kernel versions 7.1 and earlier contain security vulnerabilities. These vulnerabilities stem from the functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx, which copy user-space messages to the kernel buffer without aligning them to a 4-byte length. As a result, up to 3 bytes...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 7.1 to 7.2 contain security vulnerabilities. These vulnerabilities stem from the absence of input validation in the xcrbmsgtotype6cprbmsgx function. Arithmetic overflows during CEIL4 alignment and summation calculations can bypass size checks. Additionally, the...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.15 to 7.2 contain security vulnerabilities. These vulnerabilities arise from canceling the IRQ affinity notifier while holding the netdev lock, causing synchronous waiting for callbacks and canceling tasks, which may lead to deadlocks and cause denial of service...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the focaltechprocess-rel Packet function not setting the finger index as an unsigned type. When the index is 0, subtracting 1 causes an array out-of-bounds write, potentially leading to kernel memory corruption, privileg...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from MPTCP fastopen, which, when processing TFO SYN without data, marks the MPTFO stream as completed before confirming that the SKB has been enqueued. This results in residual states and state confusion, potentially causing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the failure to reset the abnormally large DSS field during the processing of the mptcp option. A remote attacker can send specially craftedDSS messages, resulting in inconsistent data or access to uninitialized data...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an unvalidated combination of the GEMCREATE domain. In user space, combinations like CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA can cause amdgpuboplacementfromdomain to exceed AMDGPUBOMAXPLACEMENTS and trigger BUGON,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the netfilter flowtable releasing the original direction tuple before inserting it into the reply node. This allows garbage collection to observe and release streams that are not yet fully installed. As a result, slab...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the timeout timer and queue work items are not stopped when releasing unadded disks. As a result, the requestqueue is released while still linked to the timer wheel. This could lead to reuse after release,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from SCTP’s handling of COOKIEECHO, where it does not verify the RANDOM, HMAC, and CHUNKS parameters of the cookie. Forgeries of these parameters can lead to out-of-bounds reads and writes, potentially allowing for local...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the lack of verification for allocated pointers in opteeffalendprotmem, which may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 7.1 to 7.1.10 contain security vulnerabilities. These vulnerabilities stem from the use of the zcryptmsgtype6sendep11cprb function, which accesses and modifies the domain field in the EP11 CPRB payload by using a vulnerable struct overlays. Additionally, proper...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions from 2.6.12 to 6.18.57, as well as versions from 2.6.12 to 7.1.10 and from 2.6.12 to 7.2. The vulnerability stems from the ipvsnaticmp function in ipvs, which does not re-validate the ihl field in the embedded IP header read from the sk...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the absence of input validation in the xcrbmsgtotype6ep11cprbmsgx function. The function does not verify the ep11cprb structure and the minimum buffer length of subsequent payload fields. Additionally, the CEIL4 alignmen...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from an error in the MPTCP receive path, where pre-allocated memory is not reclaimed when an error occurs before the skb is added to the receive queue. This leads to unbounded growth in forward allocated memory in abnormal...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the use of snprintf in modestring, which may return a number of bytes that exceed the remaining buffer space. The showmodes function does not check whether the returned value reaches PAGESIZE when accumulating it; as a...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.10 to 7.2 contain security vulnerabilities. These vulnerabilities stem from improper calculations of rctx-cryptlen in the tegragcmdoonereq function. When the tegragcmsetauthsize function is not called, ctx-authsize remains zero. This can lead to out-of-bounds writ...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises when Ceph calls handlereply, which fills in the inode and dentry caches. During this process, the cephmdsrequest pointer is stored in current-journalinfo. Memory allocation is directly reclaimed, and other file system dentri...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.8 contains security vulnerabilities. These vulnerabilities stem from reference counting conflicts between garbage collection and swap operations in netfilter’s ipset module. The functions ipsetputbyindex and ipsetswap may execute in a conflicting manner, leading to...