197861 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an unvalidated combination of the GEMCREATE domain. In user space, combinations like CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA can cause amdgpuboplacementfromdomain to exceed AMDGPUBOMAXPLACEMENTS and trigger BUGON,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the lack of verification for allocated pointers in opteeffalendprotmem, which may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 7.1 to 7.1.10 contain security vulnerabilities. These vulnerabilities stem from the use of the zcryptmsgtype6sendep11cprb function, which accesses and modifies the domain field in the EP11 CPRB payload by using a vulnerable struct overlays. Additionally, proper...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions from 2.6.12 to 6.18.57, as well as versions from 2.6.12 to 7.1.10 and from 2.6.12 to 7.2. The vulnerability stems from the ipvsnaticmp function in ipvs, which does not re-validate the ihl field in the embedded IP header read from the sk...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the absence of input validation in the xcrbmsgtotype6ep11cprbmsgx function. The function does not verify the ep11cprb structure and the minimum buffer length of subsequent payload fields. Additionally, the CEIL4 alignmen...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the use of snprintf in modestring, which may return a number of bytes that exceed the remaining buffer space. The showmodes function does not check whether the returned value reaches PAGESIZE when accumulating it; as a...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.10 to 7.2 contain security vulnerabilities. These vulnerabilities stem from improper calculations of rctx-cryptlen in the tegragcmdoonereq function. When the tegragcmsetauthsize function is not called, ctx-authsize remains zero. This can lead to out-of-bounds writ...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.8 contains security vulnerabilities. These vulnerabilities stem from reference counting conflicts between garbage collection and swap operations in netfilter’s ipset module. The functions ipsetputbyindex and ipsetswap may execute in a conflicting manner, leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from libceph failing to check the invalid osd index of primarytemp in the corrupted osdmap received from Ceph monitors or OSDs. As a result, out-of-bounds access occurs when reading the osdstate, osdweight, and osdaddr arrays...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the vfio-ccw logic’s recursive processing of channel programs, which does not limit the number of channel program segments. This can lead to exhaustion of the host kernel stack, potentially causing denial-of-service...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the timeout timer and queue work items are not stopped when releasing unadded disks. As a result, the requestqueue is released while still linked to the timer wheel. This could lead to reuse after release,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the u32bindclass function does not check the type of the passed parameter fh. As a result, tcuhnode is forced to tcuknode, and the res member is accessed. This leads to an out-of-bounds read of res-classid...
Emacs TRAMP command injection vulnerability
The emacs TRAMP environment has a command injection vulnerability. This vulnerability arises from TRAMP incorrectly cleaning up login parameters before passing them to the local shell, which may lead to arbitrary code execution...
Google Lighthouse input validation error vulnerability
Google Lighthouse has a vulnerability in input validation. This vulnerability stems from the lighthouse component’s insufficient validation of IP addresses published in EndpointSlice objects. This could allow remote attackers to exploit the compromised spoke clusters to create malicious...
Stolostron acm-operator-bundle software supply chain issue vulnerabilities
The Stolostron acm-operator-bundle has a software supply chain vulnerability. This vulnerability stems from the process of downloading scripts from remote sources during the build process, without verifying their authenticity and integrity. This could allow remote attackers to inject malicious...
Vim code injection vulnerability
Vim has a code injection vulnerability. This vulnerability arises from specially crafted file names that contain quotation characters and expression fragments. The quotation context can be breached during mark/unmark operations, potentially allowing arbitrary Vimscript execution. As a result, she...
Submariner Operator: Permissions, permissions management, and access control issues
The Submariner Operator has vulnerabilities related to permission granting and access control. These vulnerabilities stem from the fact that the submariner-k8s-broker-cluster role possesses excessive permissions. This could allow attackers to alter network configurations and overwrite information...
Submariner Operator: Input validation error vulnerability
The Submariner Operator has a vulnerability in input validation. This vulnerability stems from the submariner-operator component not properly verifying the image paths. This allows cluster administrators or users with permission to modify Submariner custom resources to deploy malicious images. As...
Red Hat OpenShift AI Permission and Access Control Vulnerabilities
Red Hat OpenShift AI has vulnerabilities related to permission granting and access control. These vulnerabilities stem from the fact that the maas-api and maas-controller service accounts are granted permissions beyond their operational needs. Attackers can exploit these vulnerabilities to gain...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from an improper calculation of the Tegra GPC DMA hardware burst size. When the transfer length is not an integer multiple of the configured maximum burst size, DMA suspension may occur, potentially leading ...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the incorrect checking of whether the target cluster is idle when moving extents in ocfs2. This can lead to file data being written to clusters that are already occupied by other inodes, resulting in data corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.2 contains a security vulnerability. This vulnerability stems from the use of the testbit function in the hash-based lock-free RCU reader in netfilter ipset. This function is a relaxed atomic operation and does not provide memory barrier guarantees. When it operates...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from race conditions in the md/raid5 module, specifically in the breakstripebatchlist and raid5makerequest functions. These race conditions may cause processes to wait indefinitely...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from an integer overflow issue during the boundary checking of bpfmsgpopdata. This vulnerability may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the handling of the DeleteIndexEntryAllocation function in fs/ntfs3’s doaction function, where insufficient bounds checking of e-size is performed. This leads to an abnormal length parameter for memmove, potentially...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the ntfs3 driver not correctly limiting the tomove size in the indxinsertintoroot function, which may lead to uncontrolled out-of-bounds writes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from the iceresetallvfs function, which resets all VFs. During this process, VF resources enabled by the FDIR filter are leaked, and the CTRL VSI is only disabled without proper release of resources...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from a registration race condition in the HV VHCA stats agent. This condition may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.6 contains a security vulnerability. This vulnerability stems from the ifedecode function in the net/ife/ife.c file, which does not properly validate the length of the inner Ethernet header. As a result, it may lead to system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities stem from TOCTOU issues in the processing of data size in the sofipc3bytesput and sofipc3bytesget functions, which may lead to data truncation or copying of expired bytes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability arises from a race condition between the device removal and the processing of incoming MLD queries. This can lead to reuse after release, resulting in a kernel crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the regulatorlocktwo function, which incorrectly uses-EDEADLOCK instead of-EDEADLK when comparing return values. When lock contention occurs, the lock cannot be properly released and retried, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the BPF map update and deletion paths, which call the bpfobjfreefields function when values are replaced or reclaimed. As a result, the destruction of fields depends on the operation context. In a NMI context, potentiall...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the netfilter nfnat module, where an invalid natnet pointer is used when nfnatinit fails, potentially leading to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.17 contains a security vulnerability. This vulnerability stems from improper allocation of the HV VHCA stats buffer; zero-sized buffers were allocated, which may lead to null pointer dereferencing and cause the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from PF attempting to process FASTREQUEST or EVENT messages, which may lead to violation of the VFPF ABI protocol and trigger assertions on the PF side...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an insufficient length check in the brcmfnotifyauthframerx function when processing short authentication frames. As a result, unsigned subtraction recursion can lead to a stack overflow, potentially allowing a remote...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the iSCSI ISID is dereferenced after the REGISTER AND MOVE operation but is still referenced afterward. As a result, it can be reused after being released, potentially leading to memory information leaks o...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from the improper handling of 0 count inputs by the dmafencededuparray function, which may lead to dereferencing uninitialized fence slots...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the ASoC SOF ipc4-control component not verifying the size of theMODULENOTIFICATION notification payload. This could lead to out-of-bounds read attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.20 contains a security vulnerability. This vulnerability stems from the btrfsrundelayedrefs function in btrfs, which does not set lockedref to NULL when handling the-EAGAIN error pointer returned by btrfsselectrefhead. As a result, invalid pointers may be dereferenced,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a failure in the linkconf or linksta lookup during the mt7996txprepareskb routine. As a result, the allocated tx tokens are not released when the lookup fails, potentially leading to token leakage...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient boundary checking during the traversal of the sofdais array by the createsdwdailinks function, which may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper reference counting management of svcxprt during asynchronous TLS handshake callbacks. Competition conditions may occur, potentially leading to reuse after release and kernel memory corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from a cancellation race condition in svctcphandshake. This condition may cause the xptflags variable to be read before it has been submitted as a callback. As a result, handshake calls may be called...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a race condition in the makeuffdwphugepte function located in fs/proc/taskmmu.c during updates to prot, which may lead to the loss of hardware Dirty/Accessed updates...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from an error in the data type of the scan index handled by the rtw89 driver. This error causes an infinite loop during Wi-Fi scanning at the 6GHz frequency band, potentially leading to kernel softlock and...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from accessing isopisk-conn in the isosockgetname function without holding the locksock lock, which may lead to race conditions...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.39 has a security vulnerability. This vulnerability stems from an integer overflow issue in the radeon-alignpitch function. It may lead to overflow of signed integers during alignment rounding addition and final calculations, resulting in the return of an invalid pitc...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper handling of the state of the addrconfdadfailure function in the ipv6 addrconf module. When addresses are deleted concurrently, it is possible to access already released list items, leading to a kernel crash...