196088 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.3 has a security vulnerability. This vulnerability stems from the use of hcichansent, which accesses chan-conn after releasing the RCU read lock and returns the channel. The ACL and LE scheduler utilize their data packet queues and update the send counter even when...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the EDAC/altera driver, which marks the setup callback and auxiliary functions of a10 EDAC as init. These functions may execute after memory release during the probe path, resulting in the dereferencing of already releas...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.7 contains a security vulnerability. This vulnerability stems from the bpfjitblindinsn function, which, when handling backward jumps, reduces the offset of jumps of type s16 by 2, leading to an overflow and a loop. This causes the jump to occur at the end of the program...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.26 contains security vulnerabilities. These vulnerabilities stem from race conditions between the tty break ioctl and hang operations. TCSBRK and TCSBRKP are not terminated in time, which may lead to the callback of the tty driver for devices that have been removed...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from the premature release of the shadow S2 structure in kvmarchFlushshadowall, which may lead to the reuse of containers that are still referenced after release...
Automatic1111 Stable Diffusion web UI cross-site scripting vulnerability
Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from an incorrect handling of the parameter filename in the createitemhtml function within the Card Builder component. This could lead to cross-site scripting attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the xfsqmflushone function, which fails to release the dquot flush lock when it cannot obtain the buffer associated with dquot. This could lead to a deadlock...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities arise from the fact that pointers in the extensions area are added to the expectations list when calling the helper function. Subsequent reallocations of the extensions cause these pointers to become invalid. Wh...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.2.10 contain security vulnerabilities. These vulnerabilities stem from improper lifecycle management of NVMe cdevs. In multi-path mode, cdevs that have been disabled after the removal of NS heads can still be called, potentially leading to reuse after...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities arise when binder directly calls kfree to release outdated transactions during the TFUPDATETXN transaction, replacing frozen processes. This bypasses the binderfreetxnfixups function, resulting in a leak of...
Vita3K path traversal vulnerability
Vita3K has a path traversal vulnerability. This vulnerability stems from a path traversal Zip Slip issue in the installarchivecontent function. Attackers can write files outside of the installation directory using the “..” path segment or absolute paths within a specially crafted.vpk compressed...
Dyad Cross-Site Request Forgery Vulnerability
Dyad 1.16.0 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the OAuth Callback Handler component, which may allow remote attackers to launch cross-site request fraud attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.2 contains a security vulnerability. This vulnerability stems from the net/sched actct module, which modifies shared unacknowledged CT entries when processing cloned skb objects with unacknowledged CT entries. This could lead to reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.3 contains a security vulnerability. This vulnerability arises from the possibility that rt6insertexception may be called after fib6info is removed through fib6purgert. As a result, rt6Flushexceptions no longer sets the flags, leading to the successful creation of new...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.1 contains security vulnerabilities. These vulnerabilities stem from the BPF validation and instruction rewiring process, where signals are not checked and no re-scheduling occurs. A large number of unconditional jumps must be processed one by one, leading to a quadrati...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions 6.12.112 to 6.13, 6.18.55 to 6.19, and 7.0. These vulnerabilities stem from the function bpfmasetdtor, which copies map-record but does not maintain the BTF reference within the destructor context. As a result, the working queue still...
Omnigent path traversal vulnerability
In versions prior to Omnigent 0.14.0 and 0.3.0, there was a path traversal vulnerability. This vulnerability stems from path traversal attacks. Certified users can escape the working directory by setting up nested sub-proxies in os.env.cwd. They can also upload bundles that utilize absolute or...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the getmtddevice function, which calls the getdevice callback of the main MTD. During this process, the mtd parameter passed in may be a partition. However, the putmtddevice function passes in the main...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.18 contains security vulnerabilities. These vulnerabilities arise from the lack of cancellation of the wake-up process when a device is removed. Additionally, remote wake-up requests may re-trigger this process after it has been canceled, leading to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the independent channel allocation path not including the maximum Tx queue size. As a result, 128 vectors are recorded, but only 64 are allocated. When resource settings are made, NULL entries are...
Linux Kernel Security Vulnerabilities
The Linux kernel versions 6.12.111 to 6.12.112, 6.18.53 to 6.18.55, and 7.2 have security vulnerabilities. These vulnerabilities stem from the rfcommrecvframe function, which fails to properly check the frame length when EA=0 and ignores the return value of skbpull. As a result, a 3-byte rfcommhd...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.3 contains a security vulnerability. This vulnerability stems from the use of “Exception info %s” in the btintelHWerror function, where the print statement utilizes skb-data + 1. Additionally, the 12-byte payload does not end with NULs, potentially leading to excessive...
Automatic1111 Stable Diffusion web UI input validation error vulnerability
Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from the improper handling of the Target parameter in the getobjfromstr function located in the modules/sdmodels.py file. It may lead to code injection, allowing attackers to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.10 contains a security vulnerability. This vulnerability arises from handling empty FILS-related request payloads, where zero-length allocations return ZEROSIZEPTR. In this process, sginitone places invalid pages into the scatterlist, which may trigger a kernel bug or...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the use of st-lock serialization transactions in the access path to AXI ADC registers. However, the detection function does not initialize this mutual exclusion lock before registering it with the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.18 contains security vulnerabilities. These vulnerabilities stem from the fact that the tcpwritecollapsefence function does not take effect when skwritequeue is empty. This may lead to the merging of skb packets across device encryption boundaries during retransmission ...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.14 contains a security vulnerability. This vulnerability arises from the fact that the gvepreptso function does not enforce the check that the MSS of TSO messages does not exceed 9728, and it also does not validate the gsosize of non-local-generated messages. As a resul...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.15 contains a security vulnerability. This vulnerability arises when the devmthermalofzoneregister function fails, and the I/O mapping array is not unmapped before the probe is returned, or the runtime PM is not disabled. This may lead to resources being not released...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains a security vulnerability. This vulnerability arises from the fact that the stackslotobjgetspi function does not reject non-negative offsets. When the offset is 0, the calculated spi index is the same as the valid stack slot at fp-8. This may lead to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities arise from the failure to return values when PTP is not in use. During the unbinding of drivers, the uninitialized txskbs queue is cleaned up, leading to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions 5.15.137 to 5.16, 6.1.60 to 6.2, and 6.2 itself. These vulnerabilities stem from the function iiodeviceunregister, which disables all buffers without acquiring mlock. This can lead to the buffer state including activescanmask becoming...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from the use of adsdbufferpostenable, which allocates samplesbuf during runtime. However, when unbinding the buffer, it is released before the IRQ is disabled. As a result, the handler may still copy samples...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.2 contains a security vulnerability. This vulnerability arises from the premature release of backreferences when associating with non-transmission MBSSID configuration files. Subsequently, the same element pointers are still used to determine the working channel,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.0 contains security vulnerabilities. These vulnerabilities arise from the lack of initialization of the IRQ state, MMIO address, and spinlock before requesting the alarm IRQ. Additionally, devmrequestirq enables the interrupt before returning, which may cause the...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the pasteselection function, which releases the selection mutex lock during a loop. As a result, concurrent TIOCLINUX ioctl operations can reduce the vcsel.buflen to a value below pasted, leading to unsigned integer...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 has a security vulnerability. This vulnerability stems from the threaded IRQ handler in the gp2ap020a00f driver, which queues data-work through the irqworkqueue. However, the freeirq function does not refresh the queued irwork, resulting in the work continuing to run...
Linux Kernel Security Vulnerabilities
The Linux kernel versions 2.6.31.2 to 2.6.32 have security vulnerabilities. These vulnerabilities stem from a lack of serialization in functions ttyportttyvhangup and ttyporthangup. When these functions compete with another hangup operation, they may return before the port is closed. This leads t...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.3 contains a security vulnerability. This vulnerability arises from the mac80211 fragment reassembly process, where the extralen field is set to u16. Accruing the length of oversized fragments results in integer overflows, leading to insufficient buffer allocation and...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.16 contains security vulnerabilities. These vulnerabilities stem from operations on the firmwarerevision and firmwaredate files, where the debugfsfileget function is not called, and the debugfsremoverecursive function does not wait for ongoing reads. Additionally, when...
Kin-Yiu, Wong YOLOv9: Input validation error vulnerability
Kin-Yiu, Wong YOLOv9 version 0.1 has a security vulnerability. This vulnerability stems from the improper handling of the parameter names/stride in the DetectMultiBackend.init function within the ONNX Metadata Handler component. It may lead to code injection and can be exploited remotely...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.4 contains a security vulnerability. This vulnerability arises from KVM x86 failing to re-hang the GETNESTEDSTATEPAGES request before exiting user space when attempting to obtain nested pages. As a result, KVM may use an expired and unstable PFN to re-enter L2, and the...
Gitea authorization issue vulnerability
Gitea versions 28.1.0 and earlier have security vulnerabilities. These vulnerabilities stem from the lack of verification during OpenID association callbacks to ensure that only logged-in users initiate associations. Gitea allows for the acceptance of unrequested OpenID 2.0 assertions, which coul...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the sctpwaitforconnect function releasing the socket lock during sleep. Additionally, the shutdown mechanism does not check this state before reusing the connection after setting RCVSHUTDOWN. This could lead to the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.35 has a security vulnerability. This vulnerability arises from hifusbtx, which limits TX aggregation by the number of records, rather than by the cumulative byte length. As a result, memcpy may exceed the bounds and write data into txbuf-buf, potentially causing memo...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.35 has a security vulnerability. This vulnerability stems from the ath9kwmirspcallback function, which copies data according to the number of bytes expected by the wait command after removing the verified WMI headers. However, it does not verify the length of the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.12 has security vulnerabilities. These vulnerabilities stem from the fact that the LBLCR and LBLC caches in ipvs are not limited in their growth. Functions like ipvslblcrnew and ipvslblcnew create cache entries for each unseen target address. However, maxsize only...
Gitea security vulnerabilities
Gitea versions 28.1.0 and earlier have security vulnerabilities. These vulnerabilities stem from the fact that when parsing SSH certificates, the system searches for all stored public keys rather than just the main key. If a user trusts the certificate authority and accepts any main key, it may...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.6 contains a security vulnerability. This vulnerability arises from the smb client calling the unconventional inode function finishopen, and appending the cifsFileInfo to it. As a result, the symbolic link inode does not have a CIFS release operation, leading to dentry...
Automatic1111 Stable Diffusion web UI cross-site scripting vulnerability
Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from an incorrect operation of the readmetadatafromsafetensors function in the Extra-Networks Card Builder component, specifically in the modules/sdmodels.py file. This incorre...
libLAS buffer error vulnerability
LibLAS versions 1.8.1 and earlier have a buffer error vulnerability. This vulnerability arises from the point record reader truncating the schema byte size to 16 bits when calculating the point buffer size. An attacker can create a .las file with a schema exceeding 65,535 bytes, resulting in...