197809 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the qederxbuildskb and qedetparxbuildskb functions do not perform a NULL check when qedebuildskb returns NULL. This leads to additional consumption by the BD ring, potentially damaging the DMA page referenc...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper validation of the offset of the cifs DFS referral string, potentially leading to out-of-bound reading...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient checks on the length of IPv6 extension headers in the netfilter ip6tables functions involving the ah, hbh, and rt matching pairs. This may allow malformed packets to bypass the intended discard rules...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 6.1.178, 6.6.145, 6.12.97, 6.18.40, and 7.1.5 contain security vulnerabilities. These vulnerabilities stem from SELinux failing to check connection-related permissions when introducing support for TCP Fast Open, allowing for permission bypasses...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.18 contains a security vulnerability. This vulnerability stems from an error in the tuple deduplication logic of netfilter’s nfconncount function. The error involves incorrect comparison of the connection tracking area; the area direction bit mask is incorrectly passed ...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.19 has a security vulnerability. This vulnerability stems from insufficient validation of the length of the GUE private option. The REMCSUM private option length is not calculated correctly, which may allow malformed data packets to pass verification and access...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.17 contains a security vulnerability. This vulnerability stems from insufficient validation of the user-controlled shift parameter in CONNMARK target Revision 2. When shiftbits is 32 or greater, undefined shifting behavior may occur...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the failure of dmintegritychecklimits, where the locked ranges are not unlocked after the failure, potentially leading to deadlocks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the modification of the rdma-state field in net/9p/transrdma.c without holding the reqlock lock. This leads to a race condition, which may result in reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an error in calculating the allocation size of the flexible array element currentpath within the nvmenshead structure. In systems with sparse NUMA node IDs, this could lead to out-of-array access, resulting in system...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the incorrect termination of the netfilter ipset garbage collection mechanism. This could lead to the failure of the garbage collection process to terminate properly...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper validation of the length of Bluetooth HCI codec capability elements. This could lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper handling of CPU hot-plug callback errors. The reuse of rollback path return values causes the original errors to be hidden, potentially making failed state transitions appear as successful ones...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.0 contains security vulnerabilities. These vulnerabilities stem from NFS incorrectly holding locks during the traversal of the file lock list, which may lead to reusing locks after they have been released...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.38 has a security vulnerability. This vulnerability stems from the pskbmaypull function in the batadvinterfacerx function, which may reallocate the skb buffer. However, the Ethernet header pointer pointing to the old buffer is not reassigned, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the MUX downstream decoder not performing sufficient boundary verification on the offset and length provided by the device. This could lead to out-of-bounds reads or infinite loops...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.5 contains security vulnerabilities. These vulnerabilities stem from repeated requests for WC pages with the same ucontext, which may lead to concurrent access issues...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 contains security vulnerabilities. These vulnerabilities stem from a race condition between the interrupt affinity changes and the disabling of LPI, which may lead to reusing resources after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the lack of checking the return value of nvmettcpsetqueuesock, which may lead to queue and socket leaks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the isoconnectind function in Bluetooth ISO, which accesses iso.pisk-conn during the “ev3” section without acquiring a lock. This may lead to null pointer dereferencing or competition conditions...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.23 has a security vulnerability. This vulnerability arises from insufficient initialization of the lockwork work queue during the re-initialization of the afs inode, which may lead to system warnings...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the improper handling of command tag reference counts in the scsibackgetpendreq function. When a command is not submitted, the transportgenericfreecmd function is called incorrectly, resulting in a negative overflow of t...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the dm refactoring process, which accidentally keeps the caller’s thread keyring alive. This may result in the LUKS volume key being unable to be erased from memory, leading to the exposure of sensitiv...
Linux Kernel Security Vulnerabilities
The Linux kernel has security vulnerabilities. These vulnerabilities stem from OCFS2’s insufficient validation of dinode structures. It does not reject abnormal imode type fields that are not standardized. Such fields may be copied into memory inode, leading to incorrect file type judgments or...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the mvneta driver not re-enabling percpu interrupts during recovery, which may lead to a complete loss of network connectivity...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.11 contains security vulnerabilities. These vulnerabilities stem from the use of incorrect loop indices during DMA cleanup, resulting in memory leaks and repeated unmappings of memory blocks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.13 contains a security vulnerability. This vulnerability stems from the createsdwdailinks function, which lacks boundary checks when iterating through the socdais array. When all entries are initialized, the loop may read beyond the end of the array, resulting in...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.5 contains a security vulnerability. This vulnerability arises from the fact that after the mlx5iballoctransportdomain function allocates a transport domain, the transport domain is not released when the mlx5ibenablelb function fails, which may lead to resource leaks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the insufficient validation of shift operation operands in the netfilter xtu32 component’s u32matchit function. Malicious u32 rules may provide shift counts of 32 or greater, leading to undefined shift out-of-bounds...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the function rt2x00libprobedev, which performs a full disassembly before initializing work items when detection fails, potentially leading to system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains a security vulnerability. This vulnerability stems from the kfdcriuresumesvm function, which releases memory without removing nodes from the linked list during the cleanup of criusvmmetadatalist. This could allow a render-group user without privileges to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from the fact that during peek operations, net/sched/schcodel discards data packets. Before restoring qlen, qdisctreereducebacklog is called, which may lead to the incorrect disabling of parent categories,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the btrfs zoned file system, which holds the zonedmetaiolock lock when writing metadata back. If this lock is not released while waiting for transactions to be committed, it can lead to a deadlock and cause the system to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the fiblookup function does not properly exit when performing route lookups. As a result, incorrect routes may be overwritten by other routes in the default table. This can lead to inconsistent route...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.10 contains a security vulnerability. This vulnerability stems from the sdwaddelementgroupcount function, which allows out-of-bounds memory access when the loop condition i = num is satisfied, potentially leading to memory access exceptions...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the call to refcountinc for the fibrule being destroyed in the fibrulesdump function. This may lead to abnormal reference counting...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities arise from the mm/slab mechanism, which causes unbounded recursion when allocating the objexts array between kmalloc buffers during the release process. This can lead to a stack overflow...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 contains security vulnerabilities. These vulnerabilities stem from integer overflows during the calculation of the TVLV length, which could lead to out-of-bounds access...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities stem from the KVM s390 PCI module, which, when processing AIFs without a specified AISB and with AIF enabled, may store invalid physical addresses in the associated GAITE, potentially causing system anomalies...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.1.6 contain security vulnerabilities. These vulnerabilities arise from the CRIU checkpoint copy mechanism for MQD control stacks, which fails to limit the hardware size within the allocated BO area. As a result, memcpy operations may access adjacent GTT...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.1.6 contain security vulnerabilities. These vulnerabilities arise from the use of xastoreirq to store doorbells, without properly rejecting the assignment of reserved doorbells to new queues. This can lead to the incorrect routing of fence IRQ processing to...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 6.6.148, 6.12.101, 6.18.42, and 7.1.6 contain security vulnerabilities. These vulnerabilities arise from ksmbd prematurely stopping the copying of ACEs during size calculation overflow, causing the deduplication traversal to exceed the copied ACE array and...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the lack of protection for operations that occur outside of memory regions. This could allow user applications to trigger CQP operations with a mkey value of 0...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the wacomparseandregister function, which starts the HID hardware before registering inputs and initializing pad LED/remotes. When subsequent steps fail, the error path does not stop the HID hardware before releasing Wac...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities are due to improper timing of device mapping releases, which may lead to device mapping leaks at incorrect paths...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the RDS TCP does not the sysctl table before removing the listening sockets. As a result, concurrent sysctl writes compete with the network namespace removal process, leading to the dereferencing of releas...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from improper handling of the error path in the nsmdevioctl function. Unlocking operations are performed without acquiring a mutex, which can lead to kernel lock imbalance errors...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from improper error handling during the replacement of the vxlan MDB remote entry source list. As a result, the EXCLUDE filter may lose its source and incorrectly forward traffic that should be blocked, or...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the forgetcachedacl function, which does not retain the ACLDONTCACHE status. This may lead to the fuse file system returning cached ACL values that are outdated...
Red Hat OpenShift AI Permission and Access Control Vulnerabilities
Red Hat OpenShift AI has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper configuration of the MaaS Gateway in the model service environment. As a result, users with low privileges may intercept, read, record, and modify all MaaS model...