197809 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from the Renesas I3C driver, which fails to check whether the transfer is still valid during interrupt handling. As a result, memory that has been freed may still be accessed after the transfer times out a...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.7 contains security vulnerabilities. These vulnerabilities stem from detection errors in functions like chargermanagerremove and errregextcon. These errors allow the regulator to be released before the powersupply sysfs entry is removed. Concurrent writes to the...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that file range information in fanotify is triggered during task stack construction. After the event is canceled, the reader still accesses stack memory that has been released, leading to reutilization of that...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.19 contains security vulnerabilities. These vulnerabilities arise from the fact that after the picktask function releases the rq lock, the selected state cannot remain valid indefinitely. Cross-selecting can lead to inconsistent states and deviations in forceidle...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the i3cdevicegetsupportedxfermode function, which dereferences dev-desc without holding the bus-lock lock. This may lead to race conditions or illegal pointer access...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the mctproutelookup function using rt-dev without holding a routing device reference, which may lead to reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains a security vulnerability. This vulnerability arises from the use of adii3cmasterprobe, which requests the IRQ and cancels the masking of REGIRQPENDINGCMDR before initializing the controller IBI status, the transfer queue list, and the transfer queue lock. As...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains a security vulnerability. This vulnerability stems from the dm-pcache’s cacheposdecode function, which retrieves persistent keytail and dirtytail segoff from the cache device and uses them for intersegment addressing. It does not reject decoding of segoff...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the asynchronous notifier failing to unregister and clean up erroneous paths, resulting in the notifier remaining linked in the global notifierlist. As a result, the ipu7isys structure is released, causing the linked lis...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a typo in the acpipccretrievebiosdata function, which allows for out-of-bounds writing to the pcc-sinf array, potentially leading to a stack overflow...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the ucmawritecmevent function in RDMA/ucma does not access ctx-file under program lock, leading to a race condition with the ucmamigrateid migration. This results in listadd being corrupted and the mutex lo...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the lack of verification of geometric fields such as nsegs and segment id from the disk cacheinfo. This can lead to out-of-bounds reading and writing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains a security vulnerability. This vulnerability stems from the use of QoS TIDs without proper checking in the function rtl92dutxfilldesc. This can lead to out-of-array indexing attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that ipastartxmit stops the TX queue unconditionally before calling pmruntimeget. The reawakening of the queue during runtime is prematurely consumed, resulting in a permanent stagnation of the transmission queu...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.14 contains a security vulnerability. This vulnerability arises from the use of qnapmcuexec, which exposes the stack-based receive buffer to the unsynchronized serdev receive path. In cases where commands fail or writes fail, delayed responses or unrequested messages ma...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains a security vulnerability. This vulnerability stems from the ksetreplay function in dm-pcache. When the key-seggen expires, the cachepos.cacheseg is still accessed as a parameter for cachesegget, resulting in reusing it after it has been released. As a result...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains a security vulnerability. This vulnerability stems from the ipmiDestroyUser function, which lacks a synchronizeRCU grace period before releasing the cmdrcvr receiver. As a result, the cmdrcvr list is still traversed within the RCU read critical section,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from an error in the initiation of the IPMI interface; tasks that have been scheduled are not canceled before releasing the interface, potentially leading to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the bnxt driver not writing to the doorbell when SW USO path returns NETDEVTXBUSY prematurely, which may cause the TX queue to become stalled...
Container Bubblewrap Postback Link Vulnerability
The Bubblewrap container has a post-installation link vulnerability. This vulnerability stems from the ability to follow parent symbolic links through /oldroot during the creation of files or directories during Bubblewrap sandbox settings. This could allow an attacker to write the selected path...
OpenPrinting CUPS: CUPS input validation error vulnerability
OpenPrinting CUPS has a vulnerability in input validation. This vulnerability stems from the CUPS scheduler’s failure to properly validate usernames during the printer ACL verification and private attribute filtering, when the path exceeds the main authorization path. As a result, the comparison ...
Eleveo Quality Management Cross-Site Scripting Vulnerability
Eleveo Quality Management version 9.7.0 has a security vulnerability. This vulnerability stems from a cross-site scripting vulnerability in the Conversation Review component. Attackers may exploit this vulnerability remotely...
Eleveo Quality Management processing logic error vulnerability
Eleveo Quality Management version 9.7.0 has a security vulnerability. This vulnerability stems from the operation of the parameter createdBy in the Conversation Handler component, which allows dynamic determination of object properties. This could potentially allow remote attackers to exploit thi...
Eleveo Quality Management Resource Management Error Vulnerability
Eleveo Quality Management version 9.7.0 has a resource management vulnerability. This vulnerability stems from improper handling of the labels parameter in the /enc-fwk-data/api/v3/conversations//events file by the Conversation Handler component, which may lead to a remote denial-of-service attac...
Submariner Operator Code Injection Vulnerability
The Submariner Operator has a code injection vulnerability. This vulnerability stems from the use of free-form strings from custom resource definitions CRDs in connection configurations under the cert-auth mode, without proper validation. Attackers can exploit this to inject arbitrary configurati...
SmallRye has a vulnerability related to input validation.
SmallRye has a vulnerability in input validation. This vulnerability stems from the improper validation of floating-point or string inputs during the forced conversion of BigInteger numeric scalars in SmallRye’s GraphQL queries. This allows unauthenticated remote attackers to send GraphQL queries...
Rsyslog buffer error vulnerability
Rsyslog has a buffer error vulnerability. This vulnerability stems from the RainerScript replace function in rsyslog, which incorrectly calculates the buffer size during string replacement. This leads to memory corruption. Unauthorized remote attackers can trigger a heap buffer overflow by sendin...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.16 to 6.18.57, 7.1.10 before the release, and 7.2 before the release contain security vulnerabilities. These vulnerabilities stem from the release of the AEAD conversion in RCU callbacks. The cryptofreeaead function may become dormant, which could lead to calls to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the u32bindclass function does not check the type of the passed parameter fh. As a result, tcuhnode is forced to tcuknode, and the res member is accessed. This leads to an out-of-bounds read of res-classid...
Linux Kernel Security Vulnerabilities
The Linux kernel versions 7.1 and earlier contain security vulnerabilities. These vulnerabilities stem from the functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx, which copy user-space messages to the kernel buffer without aligning them to a 4-byte length. As a result, up to 3 bytes...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 7.1 to 7.2 contain security vulnerabilities. These vulnerabilities stem from the absence of input validation in the xcrbmsgtotype6cprbmsgx function. Arithmetic overflows during CEIL4 alignment and summation calculations can bypass size checks. Additionally, the...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.15 to 7.2 contain security vulnerabilities. These vulnerabilities arise from canceling the IRQ affinity notifier while holding the netdev lock, causing synchronous waiting for callbacks and canceling tasks, which may lead to deadlocks and cause denial of service...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the focaltechprocess-rel Packet function not setting the finger index as an unsigned type. When the index is 0, subtracting 1 causes an array out-of-bounds write, potentially leading to kernel memory corruption, privileg...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.2 contains security vulnerabilities. These vulnerabilities stem from a mistake in the calculation of the minimum image size for UVD decoding in the file drivers/gpu/drm/amd/amdgpu/amdgpuuvd.c. The program incorrectly uses width instead of pitch in this calculation, and ...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from MPTCP fastopen, which, when processing TFO SYN without data, marks the MPTFO stream as completed before confirming that the SKB has been enqueued. This results in residual states and state confusion, potentially causing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises when Ceph calls handlereply, which fills in the inode and dentry caches. During this process, the cephmdsrequest pointer is stored in current-journalinfo. Memory allocation is directly reclaimed, and other file system dentri...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the use of cap-mdswanted in cephgetcaps within ceph. This value is updated before the CEPHMSGCLIENTCAPS message is actually queued for transmission. As a result, the local capability status becomes invalid, causing readi...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 3.3 to 7.2 contain security vulnerabilities. These vulnerabilities stem from a race condition that occurs during the iterative handling of SCSI EH errors, where shost-ehnoresume is checked repeatedly, potentially leading to undercounting of PM usage counts during...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the netfilter flowtable releasing the original direction tuple before inserting it into the reply node. This allows garbage collection to observe and release streams that are not yet fully installed. As a result, slab...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the improper bounds checking of the CCW chaincalclength function in s390/vfioccw. It may lead to accessing the 257th CCW after checking 256 CCWs, resulting in out-of-bounds reading and information leakage...
OpenMetadata input validation error vulnerability
Versions of OpenMetadata prior to 2.0.0 have a vulnerability related to input validation errors. This vulnerability arises from redirecting the target after authentication is provided by the caller. No validation is performed on the redirected target, resulting in the server appending the issued...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from multiple insecure decoding operations in the decodelocker function of libceph. No checks are performed on the boundaries of the decoded data, which may allow malicious or infected OSDs to trigger slab overflows, leading ...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the clsbpf module in net/sched, which does not verify whether the bound netdev of the SCHEDCLS process is matched with the target TC netdev. This allows a program on device A to be attached to device B through clsbpf and...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that ipvlan devices do not inherit neededheadroom and neededtailroom from phydev. As a result, insufficient space is reserved for the headers and tails of data packets during upper-layer calculations. This coul...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the failure to reset the abnormally large DSS field during the processing of the mptcp option. A remote attacker can send specially craftedDSS messages, resulting in inconsistent data or access to uninitialized data...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an unvalidated combination of the GEMCREATE domain. In user space, combinations like CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA can cause amdgpuboplacementfromdomain to exceed AMDGPUBOMAXPLACEMENTS and trigger BUGON,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the timeout timer and queue work items are not stopped when releasing unadded disks. As a result, the requestqueue is released while still linked to the timer wheel. This could lead to reuse after release,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the lack of verification for allocated pointers in opteeffalendprotmem, which may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 7.1 to 7.1.10 contain security vulnerabilities. These vulnerabilities stem from the use of the zcryptmsgtype6sendep11cprb function, which accesses and modifies the domain field in the EP11 CPRB payload by using a vulnerable struct overlays. Additionally, proper...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions from 2.6.12 to 6.18.57, as well as versions from 2.6.12 to 7.1.10 and from 2.6.12 to 7.2. The vulnerability stems from the ipvsnaticmp function in ipvs, which does not re-validate the ihl field in the embedded IP header read from the sk...