195933 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.3 has a security vulnerability. This vulnerability stems from the use of hcichansent, which accesses chan-conn after releasing the RCU read lock and returns the channel. The ACL and LE scheduler utilize their data packet queues and update the send counter even when...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from a lack of synchronization in the allocbulk function of bpf when processing lists like waitingforgpttrace and freebyrcuttrace concurrently. This leads to race conditions and allows for reuse of resource...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the EDAC/altera driver, which marks the setup callback and auxiliary functions of a10 EDAC as init. These functions may execute after memory release during the probe path, resulting in the dereferencing of already releas...
Linux Kernel Security Vulnerabilities
The Linux kernel version 7.2 contains a security vulnerability. This vulnerability stems from the lack of migration protection in rhtabmaplookupanddeletebatch. Under CONFIGPREEMPTRCU, only rcureadlock is used without disabling migration. Tasks involved in the deletion process can be migrated...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.2.9 have a security vulnerability. This vulnerability arises from the BPF verifier failing to reject the transfer of the PTRTOPACKET pointer to procedures that may modify data packets, potentially causing the data packet memory area to become invalid...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from the KVM x86/mmu failing to terminate the traversal of shadow page tables immediately when the root is invalid or dummy root. When memslot creation competes with L2’s stage-2 page errors, the shadow pag...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.26 contains security vulnerabilities. These vulnerabilities stem from race conditions between the tty break ioctl and hang operations. TCSBRK and TCSBRKP are not terminated in time, which may lead to the callback of the tty driver for devices that have been removed...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.2.10 contain security vulnerabilities. These vulnerabilities stem from improper lifecycle management of NVMe cdevs. In multi-path mode, cdevs that have been disabled after the removal of NS heads can still be called, potentially leading to reuse after...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.9 contains security vulnerabilities. These vulnerabilities stem from the lack of mandatory kernel access permissions for the textpoke event. This allows privileged tasks to obtain the kernel’s instruction address through PERFRECORDTEXTPOKE, thereby leaking the runtime...
Linux Kernel Security Vulnerabilities
The Linux kernel version 7.3-rc1 contains security vulnerabilities. These vulnerabilities stem from the fact that read/write operations on the IRQ register in the drm/amd/display module are not atomic operations. This can lead to race conditions, resulting in a timeout in the vblank handling...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the cachekeydecode function, which does not validate the logical offset and length of keys coming from persistent memory, potentially leading to out-of-bounds writes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the bpfsock context code, which fails to ensure that the width of the read value is consistent with the assumptions of the verifier when reading the rxqueuemapping field. As a result, the values of runti...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 has a security vulnerability. This vulnerability arises from the HID ALP driver failing to clear the released data-input2 pointer after input2 registration failed. The U1SPABSOLUTEREPORTID report triggers the u1rawevent function to dereference this pointer, allowing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.3 contains a security vulnerability. This vulnerability stems from the nfcllcpwkssap function, which only compares the servicenamelen bytes. A shorter servicename may match the prefix of the longer WKS string, potentially leading to WKS SAP hijacking...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises when SCTP processes bundled packets that contain outdated Cookie errors. As a result of this error, the non-primary transmission is deleted, but the subsequent DATA blocks still reference the deleted transmission. This allow...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from a race condition that occurs during the attachperfctxdata function in perf/core when the global and !global conditions are involved. This race condition may lead to a leak of the reference count if th...
Dyad Cross-Site Request Forgery Vulnerability
Dyad 1.16.0 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the OAuth Callback Handler component, which may allow remote attackers to launch cross-site request fraud attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the prbcalcretireblktmo function in afpacket, which fails to properly handle the user-controllable tpblocksize during 32-bit integer operations. This leads to an integer overflow, causing the soft timer to be triggered...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.5 contains a security vulnerability. This vulnerability arises from the readdtsnode function call, which retrieves the clock using ofclkget, but does not call clkput to release the reference, potentially leading to a leak of the clock reference...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities arise when binder directly calls kfree to release outdated transactions during the TFUPDATETXN transaction, replacing frozen processes. This bypasses the binderfreetxnfixups function, resulting in a leak of...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.39 has a security vulnerability. This vulnerability arises from the fact that the squashfs component does not perform range checks on dictionary sizes. When processing an abnormal SquashFS image with the COMP OPTS flag set to 1 but a dictionary size of 0, the componen...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.6 contains a security vulnerability. This vulnerability arises from the mtkethsoc driver, which allocates a dummy netdev after registering the MAC netdev and adds shared NAPIs. This results in a null pointer derefrence when network devices become visible prematurely,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.18 contains security vulnerabilities. These vulnerabilities arise from the lack of cancellation of the wake-up process when a device is removed. Additionally, remote wake-up requests may re-trigger this process after it has been canceled, leading to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the getmtddevice function, which calls the getdevice callback of the main MTD. During this process, the mtd parameter passed in may be a partition. However, the putmtddevice function passes in the main...
Linux Kernel Security Vulnerabilities
Security vulnerabilities exist in Linux kernels versions ranging from 6.12.26 to 6.12.113, 5.4.293 to 5.5, 5.10.237 to 5.11, 5.15.181 to 5.16, 6.1.136 to 6.2, 6.6.89 to 6.7, 6.14.5 to 6.15, and 6.15 itself. These vulnerabilities stem from the fact that when the GEVNTCOUNT value read by...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions 6.12.112 to 6.13, 6.18.55 to 6.19, and 7.0. These vulnerabilities stem from the function bpfmasetdtor, which copies map-record but does not maintain the BTF reference within the destructor context. As a result, the working queue still...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.3 contains a security vulnerability. This vulnerability arises from the possibility that rt6insertexception may be called after fib6info is removed through fib6purgert. As a result, rt6Flushexceptions no longer sets the flags, leading to the successful creation of new...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.13 contains security vulnerabilities. These vulnerabilities stem from an error in the update order of NACL firewall entries. The Config field is written first, resulting in pending entries that are observed by the SBI implementation or the NACL hardware. This leads to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.3 contains a security vulnerability. This vulnerability stems from the use of “Exception info %s” in the btintelHWerror function, where the print statement utilizes skb-data + 1. Additionally, the 12-byte payload does not end with NULs, potentially leading to excessive...
Automatic1111 Stable Diffusion web UI input validation error vulnerability
Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from the improper handling of the Target parameter in the getobjfromstr function located in the modules/sdmodels.py file. It may lead to code injection, allowing attackers to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.7 contains security vulnerabilities. These vulnerabilities stem from synchronization conflicts between nfcllcpsocketrelease and nfcllcpacceptdequeue. This can lead to concurrent deconnection and the release of the same sub-socket. As a result, the socket may be reused...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.10 contains a security vulnerability. This vulnerability arises from handling empty FILS-related request payloads, where zero-length allocations return ZEROSIZEPTR. In this process, sginitone places invalid pages into the scatterlist, which may trigger a kernel bug or...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability stems from the improper timing of releasing the mapping for each PHY interrupt in the .remove function of the mt7530removecommon. The regmap-irq chip uses devm for registration, and the parent interrupt is only...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from improper lifecycle management of TE GPIO in the samsung-dsim driver. When the DSI host is detached or reattached, the GPIO is not released, potentially leading to repeated requests for the GPIO...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the use of st-lock serialization transactions in the access path to AXI ADC registers. However, the detection function does not initialize this mutual exclusion lock before registering it with the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.18 contains security vulnerabilities. These vulnerabilities stem from the fact that the tcpwritecollapsefence function does not take effect when skwritequeue is empty. This may lead to the merging of skb packets across device encryption boundaries during retransmission ...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.14 contains a security vulnerability. This vulnerability arises from the fact that the gvepreptso function does not enforce the check that the MSS of TSO messages does not exceed 9728, and it also does not validate the gsosize of non-local-generated messages. As a resul...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains a security vulnerability. This vulnerability stems from the KVM arm64 nv module, which encounters a race condition with stage 2 teardown when handling nested wp/unmap operations. The module does not check whether pgt is empty, which may lead to null pointer...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.15 contains a security vulnerability. This vulnerability arises when the devmthermalofzoneregister function fails, and the I/O mapping array is not unmapped before the probe is returned, or the runtime PM is not disabled. This may lead to resources being not released...
Linux Kernel Security Vulnerabilities
The Linux kernel versions 5.10.266 to 5.11, 5.15.217 to 5.16, and 7.2 contain security vulnerabilities. These vulnerabilities stem from a race condition between the tbremovework and tbdomainremove functions in the Thunderbolt driver. The tbfreeunpluggedxdomains function is called without checking...
Beau Gunderson ip-address resource management error vulnerability
Beau Gunderson’s IP-address version prior to 10.7.4 contains a resource management error vulnerability. This vulnerability arises from functions that accept inputs containing a large number of '%' characters and invoke the Address6 constructor function. This leads to a quadratic complexity, causi...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains a security vulnerability. This vulnerability arises from the fact that the stackslotobjgetspi function does not reject non-negative offsets. When the offset is 0, the calculated spi index is the same as the valid stack slot at fp-8. This may lead to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from the BPF LSM program, which modifies extended attributes without holding an inode lock during the pathunlink/pathrmdir hooks, potentially leading to race conditions...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.8 has a security vulnerability. This vulnerability arises from the fact that the function ipv6findhdr does not verify whether the length of the extended header exceeds the end of the packet. As a result, the offset may point outside the packet’s end. In this case,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities arise from the failure to return values when PTP is not in use. During the unbinding of drivers, the uninitialized txskbs queue is cleaned up, leading to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 contains a security vulnerability. This vulnerability arises from the use of an invalid pstate pointer after the nvkmclkustateupdate function does not hit a break in the listforeachentry loop. In user space, it is possible to request an non-existent pstate ID through...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions 5.15.137 to 5.16, 6.1.60 to 6.2, and 6.2 itself. These vulnerabilities stem from the function iiodeviceunregister, which disables all buffers without acquiring mlock. This can lead to the buffer state including activescanmask becoming...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from rdsibmapfrmr failing to clear the scatterlist in the MR when DMA mapping fails. As a result, floating pointers and reusing memory after release may lead to an increase in local privileges...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from the use of adsdbufferpostenable, which allocates samplesbuf during runtime. However, when unbinding the buffer, it is released before the IRQ is disabled. As a result, the handler may still copy samples...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from the firmware parser’s ability to read lengths from binary headers and then use those lengths to traverse six-byte register/value entries. Truncated firmware images may cause the parser to read values...