197709 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the use of cap-mdswanted in cephgetcaps within ceph. This value is updated before the CEPHMSGCLIENTCAPS message is actually queued for transmission. As a result, the local capability status becomes invalid, causing readi...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the improper bounds checking of the CCW chaincalclength function in s390/vfioccw. It may lead to accessing the 257th CCW after checking 256 CCWs, resulting in out-of-bounds reading and information leakage...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the execution of the copytouser function in the fbioread function. During this execution, the hardware src pointer is advanced prematurely, resulting in asynchronous pointers. After the loop continues, reading resumes fr...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 3.3 to 7.2 contain security vulnerabilities. These vulnerabilities stem from a race condition that occurs during the iterative handling of SCSI EH errors, where shost-ehnoresume is checked repeatedly, potentially leading to undercounting of PM usage counts during...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the qethsnmpcommand and qethl3arpquery functions do not validate the lower limit of the buffer length provided by the user. Integer underflow can bypass boundary checks, leading to out-of-bounds memcpy...
OpenMetadata input validation error vulnerability
Versions of OpenMetadata prior to 2.0.0 have a vulnerability related to input validation errors. This vulnerability arises from redirecting the target after authentication is provided by the caller. No validation is performed on the redirected target, resulting in the server appending the issued...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from libceph failing to check the invalid osd index of primarytemp in the corrupted osdmap received from Ceph monitors or OSDs. As a result, out-of-bounds access occurs when reading the osdstate, osdweight, and osdaddr arrays...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the vfio-ccw logic’s recursive processing of channel programs, which does not limit the number of channel program segments. This can lead to exhaustion of the host kernel stack, potentially causing denial-of-service...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the fbinfo-mode is not cleared before deleting the video mode. This may lead to reuse after release, causing information leakage or kernel crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.2 contains security vulnerabilities. These vulnerabilities stem from a mistake in the calculation of the minimum image size for UVD decoding in the file drivers/gpu/drm/amd/amdgpu/amdgpuuvd.c. The program incorrectly uses width instead of pitch in this calculation, and ...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that ipvlan devices do not inherit neededheadroom and neededtailroom from phydev. As a result, insufficient space is reserved for the headers and tails of data packets during upper-layer calculations. This coul...
Emacs TRAMP command injection vulnerability
The emacs TRAMP environment has a command injection vulnerability. This vulnerability arises from TRAMP incorrectly cleaning up login parameters before passing them to the local shell, which may lead to arbitrary code execution...
Google Lighthouse input validation error vulnerability
Google Lighthouse has a vulnerability in input validation. This vulnerability stems from the lighthouse component’s insufficient validation of IP addresses published in EndpointSlice objects. This could allow remote attackers to exploit the compromised spoke clusters to create malicious...
Stolostron acm-operator-bundle software supply chain issue vulnerabilities
The Stolostron acm-operator-bundle has a software supply chain vulnerability. This vulnerability stems from the process of downloading scripts from remote sources during the build process, without verifying their authenticity and integrity. This could allow remote attackers to inject malicious...
Vim code injection vulnerability
Vim has a code injection vulnerability. This vulnerability arises from specially crafted file names that contain quotation characters and expression fragments. The quotation context can be breached during mark/unmark operations, potentially allowing arbitrary Vimscript execution. As a result, she...
Submariner Operator: Permissions, permissions management, and access control issues
The Submariner Operator has vulnerabilities related to permission granting and access control. These vulnerabilities stem from the fact that the submariner-k8s-broker-cluster role possesses excessive permissions. This could allow attackers to alter network configurations and overwrite information...
Submariner Operator: Input validation error vulnerability
The Submariner Operator has a vulnerability in input validation. This vulnerability stems from the submariner-operator component not properly verifying the image paths. This allows cluster administrators or users with permission to modify Submariner custom resources to deploy malicious images. As...
Red Hat OpenShift AI Permission and Access Control Vulnerabilities
Red Hat OpenShift AI has vulnerabilities related to permission granting and access control. These vulnerabilities stem from the fact that the maas-api and maas-controller service accounts are granted permissions beyond their operational needs. Attackers can exploit these vulnerabilities to gain...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from an improper calculation of the Tegra GPC DMA hardware burst size. When the transfer length is not an integer multiple of the configured maximum burst size, DMA suspension may occur, potentially leading ...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the incorrect checking of whether the target cluster is idle when moving extents in ocfs2. This can lead to file data being written to clusters that are already occupied by other inodes, resulting in data corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.2 contains a security vulnerability. This vulnerability stems from the use of the testbit function in the hash-based lock-free RCU reader in netfilter ipset. This function is a relaxed atomic operation and does not provide memory barrier guarantees. When it operates...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from race conditions in the md/raid5 module, specifically in the breakstripebatchlist and raid5makerequest functions. These race conditions may cause processes to wait indefinitely...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.6 contains security vulnerabilities. These vulnerabilities stem from KVM’s improper handling of PV EOI requests. When reading guest memory fails and PV EOI is disabled for vCPUs, it may lead to kernel crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from an integer overflow issue during the boundary checking of bpfmsgpopdata. This vulnerability may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from a buffer overflow in the FEC calculation of dm-verity. Improper validation of the erase count leads to out-of-bounds writes, potentially causing memory corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the handling of the DeleteIndexEntryAllocation function in fs/ntfs3’s doaction function, where insufficient bounds checking of e-size is performed. This leads to an abnormal length parameter for memmove, potentially...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the ntfs3 driver not correctly limiting the tomove size in the indxinsertintoroot function, which may lead to uncontrolled out-of-bounds writes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from the iceresetallvfs function, which resets all VFs. During this process, VF resources enabled by the FDIR filter are leaked, and the CTRL VSI is only disabled without proper release of resources...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from a registration race condition in the HV VHCA stats agent. This condition may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.6 contains a security vulnerability. This vulnerability stems from the ifedecode function in the net/ife/ife.c file, which does not properly validate the length of the inner Ethernet header. As a result, it may lead to system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities stem from TOCTOU issues in the processing of data size in the sofipc3bytesput and sofipc3bytesget functions, which may lead to data truncation or copying of expired bytes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability arises from a race condition between the device removal and the processing of incoming MLD queries. This can lead to reuse after release, resulting in a kernel crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the regulatorlocktwo function, which incorrectly uses-EDEADLOCK instead of-EDEADLK when comparing return values. When lock contention occurs, the lock cannot be properly released and retried, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the BPF map update and deletion paths, which call the bpfobjfreefields function when values are replaced or reclaimed. As a result, the destruction of fields depends on the operation context. In a NMI context, potentiall...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the netfilter nfnat module, where an invalid natnet pointer is used when nfnatinit fails, potentially leading to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.17 contains a security vulnerability. This vulnerability stems from improper allocation of the HV VHCA stats buffer; zero-sized buffers were allocated, which may lead to null pointer dereferencing and cause the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from PF attempting to process FASTREQUEST or EVENT messages, which may lead to violation of the VFPF ABI protocol and trigger assertions on the PF side...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an insufficient length check in the brcmfnotifyauthframerx function when processing short authentication frames. As a result, unsigned subtraction recursion can lead to a stack overflow, potentially allowing a remote...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the iSCSI ISID is dereferenced after the REGISTER AND MOVE operation but is still referenced afterward. As a result, it can be reused after being released, potentially leading to memory information leaks o...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from the improper handling of 0 count inputs by the dmafencededuparray function, which may lead to dereferencing uninitialized fence slots...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the ASoC SOF ipc4-control component not verifying the size of theMODULENOTIFICATION notification payload. This could lead to out-of-bounds read attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.20 contains a security vulnerability. This vulnerability stems from the btrfsrundelayedrefs function in btrfs, which does not set lockedref to NULL when handling the-EAGAIN error pointer returned by btrfsselectrefhead. As a result, invalid pointers may be dereferenced,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a failure in the linkconf or linksta lookup during the mt7996txprepareskb routine. As a result, the allocated tx tokens are not released when the lookup fails, potentially leading to token leakage...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient boundary checking during the traversal of the sofdais array by the createsdwdailinks function, which may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper reference counting management of svcxprt during asynchronous TLS handshake callbacks. Competition conditions may occur, potentially leading to reuse after release and kernel memory corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from a cancellation race condition in svctcphandshake. This condition may cause the xptflags variable to be read before it has been submitted as a callback. As a result, handshake calls may be called...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a race condition in the makeuffdwphugepte function located in fs/proc/taskmmu.c during updates to prot, which may lead to the loss of hardware Dirty/Accessed updates...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from an error in the data type of the scan index handled by the rtw89 driver. This error causes an infinite loop during Wi-Fi scanning at the 6GHz frequency band, potentially leading to kernel softlock and...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from accessing isopisk-conn in the isosockgetname function without holding the locksock lock, which may lead to race conditions...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.39 has a security vulnerability. This vulnerability stems from an integer overflow issue in the radeon-alignpitch function. It may lead to overflow of signed integers during alignment rounding addition and final calculations, resulting in the return of an invalid pitc...