197759 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 contains security vulnerabilities. These vulnerabilities stem from the fact that the WQE fields in the non-SRQ receiving path are directly mapped from the shared queue buffer in the user space. This allows malicious users to modify the numsge or sge entries, resulting...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the rungethighestvcn function’s failure to perform length boundary checks when parsing NTFS mapping pairs in the buffer, which may lead to out-of-bounds reads during mounting...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the tipcdisablel2media function, which calls synchronizenet when b-mediaptr is still valid. As a result, concurrent RCU readers can still access the device pointer after it has been cleared, leading to reuse of the freed...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from TCP/IPv6 incorrectly not limiting the MSS when the MTU is large. As a result, gsosize may be set to 0xFFFF, and it might be misinterpreted as GSOBYFRAGS. This can lead to a null pointer derefrence exception...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.1 contains a security vulnerability. This vulnerability arises from dmearlycreate attempting to release tables that have been instantiated by dmswaptable when dmresume fails, which may lead to kernel anomalies...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the tegraahubputvalueenum function reading e-valuesitem0 before checking the range of enumeration values, which may lead to out-of-bounds reading...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability caused by improper handling of the RDMACMEVENTADDRCHANGE event. Calling rpcrdmaepput before connection establishment leads to a reference count underflow, which may result in reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that when calculating newlen in rtwpcirxnapi, it does not verify whether the value exceeds the size of the DMA buffer, which may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from boundary checking errors in the fdpcidx function, where the operator is used instead of =. This error allows situations where fdpidx equal to n is accepted as valid...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that when restoring the SST-PP control, only the control offset is restored to power domain 0, and not to all power domains. This may lead to abnormal behavior in the system’s power management functions...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the vxlangropreparereceive function does not check whether skuserdata is empty. This value may be set to NULL by the udptunnelsockrelease function, which could lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper cleanup after the failure of adding the Bluetooth MGMTL adv monitor. This may lead to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a missing cleanup call in the error path during the initialization of the dellinit function. This may lead to residual resources such as registered notifiers, debugfs directories, keyboard backlight LEDs, and touchpad LE...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the mbox handling of nixsetrxmode in VF, where it does not check whether the request comes from a VF. When the promiscuous and allmulti flags are set to false, it is possible to accidentally delete PF’s promiscuous and...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.14 contains a security vulnerability. This vulnerability stems from the rpcrdmaisbcall function in the xprtrdma module, which does not check the buffer boundary when decoding response packets. This leads to out-of-bounds reads. Additionally, the short header processing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the indxfindbuffer function in fs/ntfs3, which recursively traverses the B+-tree index without a depth limit, potentially leading to system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the fact that the MIPI DSI and CSI domains share clock and reset control bits. This can lead to incorrect behavior when one domain disables shared resources while another domain remains active...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the seg6validatesrh function, which reads the fixed SRH field before checking whether the provided length covers the fixed fields. This may allow attackers to trigger out-of-bounds read operations through a specially...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the armvsmmuvsidtosid function, which maps the vSID of a guest to a single physical Stream ID without verifying the number of device streams. This may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the bcmsendmsg function in the can: bcm module, which reads bo-ifindex and bo-bound without locking them before acquiring a lock. This creates a race condition with functions like bcmnotify and bcmconnect. As a result, t...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from a TOCTOU issue in the sofipc4bytesput function. The copy size is based on the old data-size instead of the new data size, which may lead to truncation of valid data or copying of outdated bytes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient QoS validation, which fails to properly reject ATM traffic categories that exceed ATMANYCLASS. As a result, out-of-bounds read access may occur when reading from /proc/net/atm/pvc...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the failure to cancel the work items of pre-allocations when the afs network namespace is removed, which may lead to resources not being released properly...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the zappages function, which fails to correctly acquire the mmaplock when calling zapvmarange. There is a lock order issue, which may lead to deadlocks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.2 contains a security vulnerability. This vulnerability stems from the skbflowdissect function in net/core/flowdissector.c, which does not check the validity of the device type and macheader when requestingFLOWDISSECTORKEYETHADDRS. It also reads the 12-byte data of...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the md/raid10 driver failing to properly reset readslot when reusing the r10bio for the discard operation. As a result, the replaced bio may not be properly released, leading to resource leaks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from race conditions in BTT lane acquisition. Spinlocks and the per-CPU recursive counting model become ineffective after the lane becomes preemptible. This allows other tasks to bypass locking and concurrently use the same...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.5 contains a security vulnerability. This vulnerability arises from the lack of checking the ROM header and data structure addresses before accessing PCI ROM data. This could lead to out-of-bounds access, resulting in system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from the capablewrtmount function, which fails to properly handle detached mount points, leading to null pointer dereferencing and potentially causing the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the rsp-count field, which is controlled by the firmware in the PRINTREGINFO instruction, does not validate the message length. As a result, out-of-bounds read access to the message buffer allocated by the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.7 contains security vulnerabilities. These vulnerabilities stem from mismatches in reserved billing within the hugetlb cgroup, which may lead to underflow of page counters...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the call to refcountinc for the fibrule being destroyed in the fibrulesdump function. This may lead to abnormal reference counting...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.10 contains a security vulnerability. This vulnerability stems from the sdwaddelementgroupcount function, which allows out-of-bounds memory access when the loop condition i = num is satisfied, potentially leading to memory access exceptions...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.3 contains a security vulnerability. This vulnerability stems from improper management of the reference count in rlkref within xprtrdma. It may lead to requests being released while the hardware is still reading the send buffer, resulting in reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.5 contains security vulnerabilities. These vulnerabilities stem from the lack of fixing the upper-level rpcclnt in the SUNRPC TLS connection path, which may lead to reuse after release and underflow in reference counting...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from IPVS’s handling of ICMP errors from tunnels. When using pskbpull, IPVS strips off the external header. However, it does not ensure that the internal IP header is located within the skb headroom, and it does not properly...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the direct modification of the blockmanager buffer’s superblock heldroot by the reservemetadatasnap and releasemetadatasnap functions. If subsequent metadata submissions fail, it may lead to inconsistent metadata...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the TCP application code in IPVS, which continues to assume an IPv4 network header even after the ipvsh parameter is provided. Additionally, the offset of the ICMPV6 header in the ipvsouticmpv6 function is incorrect. Thi...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains a security vulnerability. This vulnerability arises from the error path being returned directly when the mlx5odppopulatexlt function fails. This causes the XLT buffer cleanup to be skipped, leading to DMA mapping and buffer leaks. Additionally, it may cause...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the nfsd4 Drop revokedstid function, which lacks handling for SCTYPELAYOUT situations. As a result, when the client sends FREESTATEID, the layout stid is not properly released, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel versions 6.8.2 to 6.9 contain security vulnerabilities. These vulnerabilities stem from the failure to clear the Present bit before removing the extensible mode context entries. This can lead to entries with hardware acquisition tearing and access to released memory, resulting in...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from incorrect initialization of the device’s RB-tree node. If the device does not support ATS, the insertion operation is skipped. In subsequent detection attempts, the error path initializes the node to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from failing to perform range checks on the enumeration indices provided by users, which may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from false warnings triggered when writing to the ZCREL2 system register, which may lead to hyppanic...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the ipvsconnnew function does not fully reset the ipvsseq structure. As a result, initseq and previousdelta are not initialized. Attackers can exploit this vulnerability by using malicious synchronization...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities arise from the mm/slab mechanism, which causes unbounded recursion when allocating the objexts array between kmalloc buffers during the release process. This can lead to a stack overflow...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.1 has a security vulnerability. This vulnerability stems from the vhostzerocopycomplete function in drivers/vhost/net.c, which does not properly maintain the ubufinfo reference count, resulting in reusing after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient validation of the virtqueue index in the mmap and fault paths of vhost/vdpa. It may lead to out-of-bound access, resulting in invalid PFN remapping and crashes/dos...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that after pskbmaypull reallocates the skb buffer, the unicastpacket pointer is not reassigned, which may lead to reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.7 contains a security vulnerability. This vulnerability arises from KVM arm64 vgic not checking whether the interrupt still belongs to the current vCPU during interrupt migration. This could lead to double release, resulting in system crashes...