Linux Kernel Security Vulnerabilities

The Linux kernel version 3.3 has a security vulnerability. This vulnerability stems from the use of hcichansent, which accesses chan-conn after releasing the RCU read lock and returns the channel. The ACL and LE scheduler utilize their data packet queues and update the send counter even when...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from a lack of synchronization in the allocbulk function of bpf when processing lists like waitingforgpttrace and freebyrcuttrace concurrently. This leads to race conditions and allows for reuse of resource...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the EDAC/altera driver, which marks the setup callback and auxiliary functions of a10 EDAC as init. These functions may execute after memory release during the probe path, resulting in the dereferencing of already releas...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains a security vulnerability. This vulnerability stems from the lack of migration protection in rhtabmaplookupanddeletebatch. Under CONFIGPREEMPTRCU, only rcureadlock is used without disabling migration. Tasks involved in the deletion process can be migrated...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.2.9 have a security vulnerability. This vulnerability arises from the BPF verifier failing to reject the transfer of the PTRTOPACKET pointer to procedures that may modify data packets, potentially causing the data packet memory area to become invalid...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from the KVM x86/mmu failing to terminate the traversal of shadow page tables immediately when the root is invalid or dummy root. When memslot creation competes with L2’s stage-2 page errors, the shadow pag...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.26 contains security vulnerabilities. These vulnerabilities stem from race conditions between the tty break ioctl and hang operations. TCSBRK and TCSBRKP are not terminated in time, which may lead to the callback of the tty driver for devices that have been removed...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.2.10 contain security vulnerabilities. These vulnerabilities stem from improper lifecycle management of NVMe cdevs. In multi-path mode, cdevs that have been disabled after the removal of NS heads can still be called, potentially leading to reuse after...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.9 contains security vulnerabilities. These vulnerabilities stem from the lack of mandatory kernel access permissions for the textpoke event. This allows privileged tasks to obtain the kernel’s instruction address through PERFRECORDTEXTPOKE, thereby leaking the runtime...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.3-rc1 contains security vulnerabilities. These vulnerabilities stem from the fact that read/write operations on the IRQ register in the drm/amd/display module are not atomic operations. This can lead to race conditions, resulting in a timeout in the vblank handling...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the cachekeydecode function, which does not validate the logical offset and length of keys coming from persistent memory, potentially leading to out-of-bounds writes...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the bpfsock context code, which fails to ensure that the width of the read value is consistent with the assumptions of the verifier when reading the rxqueuemapping field. As a result, the values of runti...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.35 has a security vulnerability. This vulnerability stems from the ath9kwmirspcallback function, which copies data according to the number of bytes expected by the wait command after removing the verified WMI headers. However, it does not verify the length of the...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.14.9 to 6.15 and 6.15 itself have security vulnerabilities. These vulnerabilities stem from the fact that when CONFIGDCB is enabled, it does not check whether queuetopfcmap has been initialized. This can lead to invalid memory accesses by SDP VFs...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.8 has a security vulnerability. This vulnerability arises from the HID ALP driver failing to clear the released data-input2 pointer after input2 registration failed. The U1SPABSOLUTEREPORTID report triggers the u1rawevent function to dereference this pointer, allowing...

Automatic1111 Stable Diffusion web UI cross-site scripting vulnerability

Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from an incorrect operation of the readmetadatafromsafetensors function in the Extra-Networks Card Builder component, specifically in the modules/sdmodels.py file. This incorre...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.3 contains a security vulnerability. This vulnerability stems from the nfcllcpwkssap function, which only compares the servicenamelen bytes. A shorter servicename may match the prefix of the longer WKS string, potentially leading to WKS SAP hijacking...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises when SCTP processes bundled packets that contain outdated Cookie errors. As a result of this error, the non-primary transmission is deleted, but the subsequent DATA blocks still reference the deleted transmission. This allow...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from a race condition that occurs during the attachperfctxdata function in perf/core when the global and !global conditions are involved. This race condition may lead to a leak of the reference count if th...

Dyad Cross-Site Request Forgery Vulnerability

Dyad 1.16.0 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the OAuth Callback Handler component, which may allow remote attackers to launch cross-site request fraud attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the prbcalcretireblktmo function in afpacket, which fails to properly handle the user-controllable tpblocksize during 32-bit integer operations. This leads to an integer overflow, causing the soft timer to be triggered...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.5 contains a security vulnerability. This vulnerability arises from the readdtsnode function call, which retrieves the clock using ofclkget, but does not call clkput to release the reference, potentially leading to a leak of the clock reference...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities arise when binder directly calls kfree to release outdated transactions during the TFUPDATETXN transaction, replacing frozen processes. This bypasses the binderfreetxnfixups function, resulting in a leak of...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.39 has a security vulnerability. This vulnerability arises from the fact that the squashfs component does not perform range checks on dictionary sizes. When processing an abnormal SquashFS image with the COMP OPTS flag set to 1 but a dictionary size of 0, the componen...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.9 contains a security vulnerability. This vulnerability stems from KVM arm64 failing to properly apply fine-grained UNDEF exceptions. As a result, the configuration of FGT traps is limited to FEATFGT only. This could lead to false warnings being triggered when running...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.35 has a security vulnerability. This vulnerability arises from hifusbtx, which limits TX aggregation by the number of records, rather than by the cumulative byte length. As a result, memcpy may exceed the bounds and write data into txbuf-buf, potentially causing memo...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains a security vulnerability. This vulnerability arises from the process of local endpoint learning, where peer-lock is updated in place by reading bind-local. Since the UDP TX field is read without locking, it may lead to address tearing during concurrent IPv6...

Gitea security vulnerabilities

Gitea versions 28.1.0 and earlier have security vulnerabilities. These vulnerabilities stem from the fact that when parsing SSH certificates, the system searches for all stored public keys rather than just the main key. If a user trusts the certificate authority and accepts any main key, it may...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.6 contains a security vulnerability. This vulnerability arises from the mtkethsoc driver, which allocates a dummy netdev after registering the MAC netdev and adds shared NAPIs. This results in a null pointer derefrence when network devices become visible prematurely,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from the mtkdrmbind function, which prematurely returns and does not release the disp-mutex device reference obtained through offinddevicebynode when handling non-mmsys primary devices. This can lead to...

Gitea authorization issue vulnerability

Gitea 1.27.2 and earlier versions have an authorization issue. This issue arises from the lack of the individualPermsChecker middleware during the registration of seven API routes under /api/v1/users/username. This failure does not enforce visibility for target users, potentially allowing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.18 contains security vulnerabilities. These vulnerabilities arise from the lack of cancellation of the wake-up process when a device is removed. Additionally, remote wake-up requests may re-trigger this process after it has been canceled, leading to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the getmtddevice function, which calls the getdevice callback of the main MTD. During this process, the mtd parameter passed in may be a partition. However, the putmtddevice function passes in the main...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.11 contains a security vulnerability. This vulnerability stems from the use of kfree to release GEM objects in a wrong path within virtiogpuvramcreate. The function does not call drmgemobjectrelease, resulting in the released objects remaining in the interval tree of th...

Linux Kernel Security Vulnerabilities

Security vulnerabilities exist in Linux kernels versions ranging from 6.12.26 to 6.12.113, 5.4.293 to 5.5, 5.10.237 to 5.11, 5.15.181 to 5.16, 6.1.136 to 6.2, 6.6.89 to 6.7, 6.14.5 to 6.15, and 6.15 itself. These vulnerabilities stem from the fact that when the GEVNTCOUNT value read by...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 6.12.112 to 6.13, 6.18.55 to 6.19, and 7.0. These vulnerabilities stem from the function bpfmasetdtor, which copies map-record but does not maintain the BTF reference within the destructor context. As a result, the working queue still...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.3 contains a security vulnerability. This vulnerability arises from the possibility that rt6insertexception may be called after fib6info is removed through fib6purgert. As a result, rt6Flushexceptions no longer sets the flags, leading to the successful creation of new...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.13 contains security vulnerabilities. These vulnerabilities stem from an error in the update order of NACL firewall entries. The Config field is written first, resulting in pending entries that are observed by the SBI implementation or the NACL hardware. This leads to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.3 contains a security vulnerability. This vulnerability stems from the use of “Exception info %s” in the btintelHWerror function, where the print statement utilizes skb-data + 1. Additionally, the 12-byte payload does not end with NULs, potentially leading to excessive...

Automatic1111 Stable Diffusion web UI input validation error vulnerability

Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from the improper handling of the Target parameter in the getobjfromstr function located in the modules/sdmodels.py file. It may lead to code injection, allowing attackers to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.7 contains security vulnerabilities. These vulnerabilities stem from synchronization conflicts between nfcllcpsocketrelease and nfcllcpacceptdequeue. This can lead to concurrent deconnection and the release of the same sub-socket. As a result, the socket may be reused...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.10 contains a security vulnerability. This vulnerability arises from handling empty FILS-related request payloads, where zero-length allocations return ZEROSIZEPTR. In this process, sginitone places invalid pages into the scatterlist, which may trigger a kernel bug or...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains a security vulnerability. This vulnerability stems from the improper timing of releasing the mapping for each PHY interrupt in the .remove function of the mt7530removecommon. The regmap-irq chip uses devm for registration, and the parent interrupt is only...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from improper lifecycle management of TE GPIO in the samsung-dsim driver. When the DSI host is detached or reattached, the GPIO is not released, potentially leading to repeated requests for the GPIO...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the use of st-lock serialization transactions in the access path to AXI ADC registers. However, the detection function does not initialize this mutual exclusion lock before registering it with the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from nftables not skipping expired elements when inserting or deleting catchall elements. As a result, expired elements become invisible but still prevent reinsertion or incorrect deactivation of elements...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.18 contains security vulnerabilities. These vulnerabilities stem from the fact that the tcpwritecollapsefence function does not take effect when skwritequeue is empty. This may lead to the merging of skb packets across device encryption boundaries during retransmission ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.14 contains a security vulnerability. This vulnerability arises from the fact that the gvepreptso function does not enforce the check that the MSS of TSO messages does not exceed 9728, and it also does not validate the gsosize of non-local-generated messages. As a resul...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains a security vulnerability. This vulnerability stems from the KVM arm64 nv module, which encounters a race condition with stage 2 teardown when handling nested wp/unmap operations. The module does not check whether pgt is empty, which may lead to null pointer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability arises when the devmthermalofzoneregister function fails, and the I/O mapping array is not unmapped before the probe is returned, or the runtime PM is not disabled. This may lead to resources being not released...