195788 matches found
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.2.9 have a security vulnerability. This vulnerability arises from the BPF verifier failing to reject the transfer of the PTRTOPACKET pointer to procedures that may modify data packets, potentially causing the data packet memory area to become invalid...
Linux Kernel Security Vulnerabilities
The Linux kernel version 7.2 contains a security vulnerability. This vulnerability stems from the lack of migration protection in rhtabmaplookupanddeletebatch. Under CONFIGPREEMPTRCU, only rcureadlock is used without disabling migration. Tasks involved in the deletion process can be migrated...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from the KVM x86/mmu failing to terminate the traversal of shadow page tables immediately when the root is invalid or dummy root. When memslot creation competes with L2’s stage-2 page errors, the shadow pag...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.26 contains security vulnerabilities. These vulnerabilities stem from race conditions between the tty break ioctl and hang operations. TCSBRK and TCSBRKP are not terminated in time, which may lead to the callback of the tty driver for devices that have been removed...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.3 contains a security vulnerability. This vulnerability stems from the use of “Exception info %s” in the btintelHWerror function, where the print statement utilizes skb-data + 1. Additionally, the 12-byte payload does not end with NULs, potentially leading to excessive...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.2.10 contain security vulnerabilities. These vulnerabilities stem from improper lifecycle management of NVMe cdevs. In multi-path mode, cdevs that have been disabled after the removal of NS heads can still be called, potentially leading to reuse after...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.9 contains security vulnerabilities. These vulnerabilities stem from the lack of mandatory kernel access permissions for the textpoke event. This allows privileged tasks to obtain the kernel’s instruction address through PERFRECORDTEXTPOKE, thereby leaking the runtime...
Linux Kernel Security Vulnerabilities
The Linux kernel version 7.3-rc1 contains security vulnerabilities. These vulnerabilities stem from the fact that read/write operations on the IRQ register in the drm/amd/display module are not atomic operations. This can lead to race conditions, resulting in a timeout in the vblank handling...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the cachekeydecode function, which does not validate the logical offset and length of keys coming from persistent memory, potentially leading to out-of-bounds writes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the bpfsock context code, which fails to ensure that the width of the read value is consistent with the assumptions of the verifier when reading the rxqueuemapping field. As a result, the values of runti...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.35 has a security vulnerability. This vulnerability stems from the ath9kwmirspcallback function, which copies data according to the number of bytes expected by the wait command after removing the verified WMI headers. However, it does not verify the length of the...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.14.9 to 6.15 and 6.15 itself have security vulnerabilities. These vulnerabilities stem from the fact that when CONFIGDCB is enabled, it does not check whether queuetopfcmap has been initialized. This can lead to invalid memory accesses by SDP VFs...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from the use of adsdbufferpostenable, which allocates samplesbuf during runtime. However, when unbinding the buffer, it is released before the IRQ is disabled. As a result, the handler may still copy samples...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.15 contains a security vulnerability. This vulnerability arises when the devmthermalofzoneregister function fails, and the I/O mapping array is not unmapped before the probe is returned, or the runtime PM is not disabled. This may lead to resources being not released...
Automatic1111 Stable Diffusion web UI input validation error vulnerability
Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from the improper handling of the Target parameter in the getobjfromstr function located in the modules/sdmodels.py file. It may lead to code injection, allowing attackers to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains a security vulnerability. This vulnerability stems from the KVM arm64 nv module, which encounters a race condition with stage 2 teardown when handling nested wp/unmap operations. The module does not check whether pgt is empty, which may lead to null pointer...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 has a security vulnerability. This vulnerability arises from the HID ALP driver failing to clear the released data-input2 pointer after input2 registration failed. The U1SPABSOLUTEREPORTID report triggers the u1rawevent function to dereference this pointer, allowing...
Automatic1111 Stable Diffusion web UI cross-site scripting vulnerability
Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from an incorrect operation of the readmetadatafromsafetensors function in the Extra-Networks Card Builder component, specifically in the modules/sdmodels.py file. This incorre...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the atl1 driver’s improper handling of the out-of-bounds cmbtpdnexttoclean value reported by hardware during PCIe link/mac reset operations. This could lead to loops that cannot be exited, resulting in a soft lock...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.3 contains security vulnerabilities. These vulnerabilities arise from adding pointers to the extended area into the expected list when calling auxiliary functions. Subsequent reallocations of space after adding extensions cause the pointers to become invalid. Accessing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the use of st-lock serialization transactions in the access path to AXI ADC registers. However, the detection function does not initialize this mutual exclusion lock before registering it with the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability stems from the improper timing of releasing the mapping for each PHY interrupt in the .remove function of the mt7530removecommon. The regmap-irq chip uses devm for registration, and the parent interrupt is only...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.3 has a security vulnerability. This vulnerability stems from the use of hcichansent, which accesses chan-conn after releasing the RCU read lock and returns the channel. The ACL and LE scheduler utilize their data packet queues and update the send counter even when...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 contains a security vulnerability. This vulnerability arises from the use of an invalid pstate pointer after the nvkmclkustateupdate function does not hit a break in the listforeachentry loop. In user space, it is possible to request an non-existent pstate ID through...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the BPF JIT compiler generating the addu instruction instead of the addiu instruction for the immediate numerical JMP JEQ/JNE instructions in MIPS32. As a result, the immediate value 1 is interpreted as the register $at...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.3 contains a security vulnerability. This vulnerability stems from the nfcllcpwkssap function, which only compares the servicenamelen bytes. A shorter servicename may match the prefix of the longer WKS string, potentially leading to WKS SAP hijacking...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises when SCTP processes bundled packets that contain outdated Cookie errors. As a result of this error, the non-primary transmission is deleted, but the subsequent DATA blocks still reference the deleted transmission. This allow...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from a race condition that occurs during the attachperfctxdata function in perf/core when the global and !global conditions are involved. This race condition may lead to a leak of the reference count if th...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities arise from failing to clear buf-page after a napibuildskb failure. As a result, stmmacrxrefill skips the allocation process and reassigns the recycled page to the RX descriptor, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.14 contains a security vulnerability. This vulnerability arises from the fact that the gvepreptso function does not enforce the check that the MSS of TSO messages does not exceed 9728, and it also does not validate the gsosize of non-local-generated messages. As a resul...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the fact that the perfclearbranchentrybitfields function does not clean up the newtype and priv fields properly. As a result, uninitialized kmalloc data or previously recorded values may be leaked into...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.7 contains security vulnerabilities. These vulnerabilities stem from synchronization conflicts between nfcllcpsocketrelease and nfcllcpacceptdequeue. This can lead to concurrent deconnection and the release of the same sub-socket. As a result, the socket may be reused...
Linux Kernel Security Vulnerabilities
The Linux kernel version 7.1 contains a security vulnerability. This vulnerability stems from the use of the TCP header length incorrectly in UDP GSO packets by the gvecansendtso function. This leads to an incorrect estimation of the number of segmentation buffers, potentially causing unnecessary...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the use of flowoffloadworkdel, which releases NFFLOWHWDEAD before the work thread has cleared NFFLOWHWPENDING. This concurrent garbage collection may cause the flow to be released prematurely, leading t...
Dyad Cross-Site Request Forgery Vulnerability
Dyad 1.16.0 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the OAuth Callback Handler component, which may allow remote attackers to launch cross-site request fraud attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the prbcalcretireblktmo function in afpacket, which fails to properly handle the user-controllable tpblocksize during 32-bit integer operations. This leads to an integer overflow, causing the soft timer to be triggered...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains a security vulnerability. This vulnerability arises from the incorrect invocation of the bonding-specific API when processing team device events by using net/mlx5. This leads to out-of-bound memory access to the slab structure...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities arise from the failure to return values when PTP is not in use. During the unbinding of drivers, the uninitialized txskbs queue is cleaned up, leading to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.5 contains a security vulnerability. This vulnerability arises from the readdtsnode function call, which retrieves the clock using ofclkget, but does not call clkput to release the reference, potentially leading to a leak of the clock reference...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities arise when binder directly calls kfree to release outdated transactions during the TFUPDATETXN transaction, replacing frozen processes. This bypasses the binderfreetxnfixups function, resulting in a leak of...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.39 has a security vulnerability. This vulnerability arises from the fact that the squashfs component does not perform range checks on dictionary sizes. When processing an abnormal SquashFS image with the COMP OPTS flag set to 1 but a dictionary size of 0, the componen...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains a security vulnerability. This vulnerability stems from KVM arm64 failing to properly apply fine-grained UNDEF exceptions. As a result, the configuration of FGT traps is limited to FEATFGT only. This could lead to false warnings being triggered when running...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.35 has a security vulnerability. This vulnerability arises from hifusbtx, which limits TX aggregation by the number of records, rather than by the cumulative byte length. As a result, memcpy may exceed the bounds and write data into txbuf-buf, potentially causing memo...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains a security vulnerability. This vulnerability arises from the process of local endpoint learning, where peer-lock is updated in place by reading bind-local. Since the UDP TX field is read without locking, it may lead to address tearing during concurrent IPv6...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the EDAC/altera driver, which marks the setup callback and auxiliary functions of a10 EDAC as init. These functions may execute after memory release during the probe path, resulting in the dereferencing of already releas...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.18 contains security vulnerabilities. These vulnerabilities stem from the fact that the tcpwritecollapsefence function does not take effect when skwritequeue is empty. This may lead to the merging of skb packets across device encryption boundaries during retransmission ...
Gitea security vulnerabilities
Gitea versions 28.1.0 and earlier have security vulnerabilities. These vulnerabilities stem from the fact that when parsing SSH certificates, the system searches for all stored public keys rather than just the main key. If a user trusts the certificate authority and accepts any main key, it may...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.6 contains a security vulnerability. This vulnerability arises from the mtkethsoc driver, which allocates a dummy netdev after registering the MAC netdev and adds shared NAPIs. This results in a null pointer derefrence when network devices become visible prematurely,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from the mtkdrmbind function, which prematurely returns and does not release the disp-mutex device reference obtained through offinddevicebynode when handling non-mmsys primary devices. This can lead to...
Gitea authorization issue vulnerability
Gitea 1.27.2 and earlier versions have an authorization issue. This issue arises from the lack of the individualPermsChecker middleware during the registration of seven API routes under /api/v1/users/username. This failure does not enforce visibility for target users, potentially allowing...