Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.36 has a security vulnerability. This vulnerability stems from the lack of a memory barrier between the anonvma initialization and the vma-anonvma release. This may lead to the reuse of anonvma after its root is released, causing abnormal lock states and task suspensi...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.8 has a security vulnerability. This vulnerability arises from the HID ALP driver failing to clear the released data-input2 pointer after input2 registration failed. The U1SPABSOLUTEREPORTID report triggers the u1rawevent function to dereference this pointer, allowing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.3 contains a security vulnerability. This vulnerability stems from the lack of enforcing tunnel uniqueness for metadata in ipgre’s changelink. This allows the activation of collectmd on existing GRE, GRETAP, or ERSPAN devices. It may replace the metadata reception entri...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the GUE REMSUM option not verifying the order of the checksum’s start value and the field offset. When the offset is less than the start value, underflow occurs, potentially leading to forwarded packets being written...

Gitea information leakage vulnerability

The Gitea version from 1.22.0 to 28.1.0 has an information leakage vulnerability. This vulnerability arises from the assets list returned during the creation of draft releases via API. These assets are built from releases without IDs, which matches all attachments not associated with any releases...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities arise from an error in the processing of the bmp280 sensor’s sampling frequency; the number of flattened elements used as the row count of a two-dimensional array was incorrectly calculated, leading to...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions from 6.12.81 to 6.12.113, from 6.18.22 to 6.18.56, from 6.1.168 to 6.2, from 6.6.134 to 6.7, from 6.19.12 to 6.20, and 7.0. The vulnerability stems from incomplete detection of IPv6 extension headers in tunneled data packets. The system...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.5 contains a security vulnerability. This vulnerability arises from TIPC resetting the receiver counter when the peer node’s key changes. However, the sender continues to use the same transmission key and salt. As a result, subsequent data packets reuse the AES-GCM rand...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from kprobes failing to skip disabled probes when checking optkprobe overlaps. As a result, INT3 overwrites the last byte of the jump offset, potentially causing the program to be executed at an incorrect address...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.31 contains a security vulnerability. This vulnerability arises from the tpacketsnd function, which, when processing SENDREQUEST frames of the TX ring, accumulates the length of valid packets into the symbolic integer lensum. This process does not prevent an overflow ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.9 contains security vulnerabilities. These vulnerabilities arise when the controller path that creates the multipath namespace is removed for the first time, causing the I/O direct access command to trigger a release followed by reuse of resources...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the btintelpcie driver, which fails to perform boundary verification on the DMA index frbdtag and crhia provided by the device during the RX path. This may lead to out-of-bounds pointer dereferencing ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the kionix-kx022a driver’s improper array boundary checking when converting register values to array indices. As a result, sizeofarray is incorrectly interpreted as the last valid index, potentially...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability stems from the fact that typecpartnerdesc is not initialized in tps6598xconnect. As a result, uninitialized function pointers may be called, and stack data may be leaked through the partner sysfs...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.16 contains a security vulnerability. This vulnerability arises from the fact that SORESERVEMEM is not limited to TCP sockets, and no upper limit is set. This may lead to concurrent operations on UDP sockets damaging skforwardalloc and memcg accounting, or causing...

JEECG official open-source JeecgBoot AI low-code platform has a SQL injection vulnerability.

The JEECG official open-source JeecgBoot AI low-code platform versions prior to 3.9.5 have a SQL injection vulnerability. This vulnerability stems from improper handling of newline characters when processing dictionary and online report SQL fragments. Certified attackers can bypass the...

Automatic1111 Stable Diffusion web UI resource management error vulnerability

Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a resource management vulnerability. This vulnerability stems from an improper handling of the header length field parameter in the readmetadatafromsafetensors function within the Metadata Extraction component’s file...

WordPress OttoKit: Permissions, licensing, and access control issues

WordPress OttoKit versions 1.1.40 and earlier have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...

Vanus-Labs Vanus authorization issue vulnerability

In the versions of Vanus-Labs’ Vanus from 0.8.0 to 0.9.0, there is an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in the gateway, allowing any authenticated user to call methods such as Subscribe, Ack, and unregistered methods without proper...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from mac80211’s ieee80211vifusereservedswitch function, which incorrectly counts the reserved range during reserved switching. This approach does not ensure that the reserved context matches the current replacement context. A...

ProjectSend authorization issue vulnerability

The ProjectSend version 2.0.0 to 2.7.0 had an authorization issue vulnerability. This vulnerability stemmed from improper authorization. Users who possess restricted API tokens were able to change the token owner credentials via the PATCH /api/v1/users/user endpoint. Only tokens with the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from the fixhostownership function in KVM arm64, which only iterates through the linear mapping aliases of each memblock area, without iterating through the VA range of each CPU’s hypervisor stack. This may...

WordPress Strong Testimonials: Deserialization Injection Vulnerability

WordPress versions 3.3.12 and earlier have a deserialization vulnerability. This vulnerability stems from deserializing untrusted data, which may lead to object injection attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.18 contains a security vulnerability. This vulnerability arises from the incorrect invocation of the bonding-specific API when processing team device events by using net/mlx5. This leads to out-of-bound memory access to the slab structure...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability stems from the ofoverlayfdtapply function in of/overlay, which checks the return value of idralloc before execution. If this function fails, a negative ID passes the check, and uninitialized ovcs-ovcslist is...

Gitea security vulnerabilities

Gitea 28.1.0 and earlier versions have security vulnerabilities. These vulnerabilities stem from issues with adding and deleting reactions, and the web processor for reactions does not prevent users without write permissions from performing operations on locked reactions. As a result, logged-in...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a flaw in the rustbinder thread, where delayed work items are not canceled when the thread exits, resulting in these work items not being cleaned up...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.14 contains a security vulnerability. This vulnerability arises from the fact that advancenextseg and seg6nextcsidadvancearg do not ensure that the data of the packet can be written before modifying the Segments Left field of SRH and the IPv6 destination address. As a...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.13 contains security vulnerabilities. These vulnerabilities arise from a race condition that occurs when canceling requests for the lightning control channel. This race condition causes the tbcfgrequestwork and tbcfgrequest Cancel functions to compete, resulting in the...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 5.10.200 through 5.11, and 5.12, have security vulnerabilities. These vulnerabilities arise from the unmasking process for canceling the ZYNQ XADC alarm IRQ without first releasing the IRQ after unbinding. As a result, the processing program may re-queue and run its task...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.21 has a security vulnerability. This vulnerability stems from a race condition that occurs when the USB dynamic ID driver is. The dynamic ID is released before the driver is canceled and the newid attribute is removed. This may lead to a race condition that causes th...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 6.1.110 through 6.2, 6.6.51 through 6.7, 6.10.10 through 6.11, and 6.11 itself. These vulnerabilities stem from smb3zerorange, which only conditionally refreshes dirty data when simulating FALLOCFLZERORANGE. It does not refresh the data...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.18 contains a security vulnerability. This vulnerability stems from the IIO core failing to filter repeated writes to the event enablement properties. Repeated disabling requests still invoke kxcjk1013setpowerstatedata, false, releasing unacquired runtime power manageme...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from the max30102 interrupt handler referencing an empty activescanmask when a buffer is not enabled, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.5 has a security vulnerability. This vulnerability arises from a failure in power management settings, where the probe function does not unregister the registered iiodevice when it fails, resulting in the device being released, but the sysfs/chardev nodes still pointing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the btfstructwalk function, which does not check the element type and size when handling accesses to structures where the last member is a flexible array. It uses off - moff % t-size for modulo...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.10 contains a security vulnerability. This vulnerability arises from an erroneous path in the code where fput is called after the SLOTALLOC request fails, causing neenclave to be released. As a result, neenclaverelease accesses neenclave-slotuid, which has already been...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 5.10.50 through 5.11, 5.12.17 through 5.13, 5.13.2 through 5.14, and 5.14 itself. These vulnerabilities stem from SMB clients, which perform the FALLOCFLKEEPSIZE fallocate simulation in smb3simplefallocaterange. During this process, dat...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.1.68 to 6.2, 6.6.7 to 6.7, and 6.7 contain security vulnerabilities. These vulnerabilities stem from cifsremapfilerange, which only discards page caches that overlap with the target area when extending file ranges through cloning. Page caches that span across old EOFs...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.32 contains security vulnerabilities. These vulnerabilities stem from the fact that the fields invalidHandle, swapfile, oplockbreakcancelled, offload, and statusfiledeleted in the cifsFileInfo structure share the same byte. When different code paths concurrently updat...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from the ad4030setavgframelen function, which does not validate the input before calculating the logarithm. When zero or negative values are passed as inputs, the iLog2 function returns undefined results...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.26 has a security vulnerability. This vulnerability stems from the KVM s390’s kvms390setirqstate function, which does not acquire the locks on kvm-srcu or slots when performing the Store status operation, potentially leading to race conditions...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 3.10.106 through 3.11, 3.12.71 through 3.13, and 3.14. These vulnerabilities stem from improper handling of transmission states, specifically those marked as SCTPUNCONFIRMED, during the update and retransmission process via the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities arise from modifying the bind file that is published via RCU while clearing expired local sources. When reading the path without locking, it is possible to observe torn IPv6 addresses, leading to address...

Gitea authorization issue vulnerability

Gitea versions 28.1.0 and earlier have security vulnerabilities. These vulnerabilities stem from the lack of verification during OpenID association callbacks to ensure that only logged-in users initiate associations. Gitea allows for the acceptance of unrequested OpenID 2.0 assertions, which coul...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.15 contains a security vulnerability. This vulnerability stems from the ntfscreate inode function in fs/ntfs3, which calls dinstantiate when the inode is still marked as INEW. As a result, the dentry is hashed during the creation process, and path traversal can lock the...

Automatic1111 Stable Diffusion web UI cross-site scripting vulnerability

Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from an incorrect handling of the parameter filename in the createitemhtml function within the Card Builder component. This could lead to cross-site scripting attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.3 contains a security vulnerability. This vulnerability arises from the mac80211 fragment reassembly process, where the extralen field is set to u16. Accruing the length of oversized fragments results in integer overflows, leading to insufficient buffer allocation and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains security vulnerabilities. These vulnerabilities stem from operations on the firmwarerevision and firmwaredate files, where the debugfsfileget function is not called, and the debugfsremoverecursive function does not wait for ongoing reads. Additionally, when...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from the premature release of the shadow S2 structure in kvmarchFlushshadowall, which may lead to the reuse of containers that are still referenced after release...