Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.23 has a security vulnerability. This vulnerability arises from insufficient initialization of the lockwork work queue during the re-initialization of the afs inode, which may lead to system warnings...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the improper handling of command tag reference counts in the scsibackgetpendreq function. When a command is not submitted, the transportgenericfreecmd function is called incorrectly, resulting in a negative overflow of t...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the dm refactoring process, which accidentally keeps the caller’s thread keyring alive. This may result in the LUKS volume key being unable to be erased from memory, leading to the exposure of sensitiv...

Linux Kernel Security Vulnerabilities

The Linux kernel has security vulnerabilities. These vulnerabilities stem from OCFS2’s insufficient validation of dinode structures. It does not reject abnormal imode type fields that are not standardized. Such fields may be copied into memory inode, leading to incorrect file type judgments or...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the mvneta driver not re-enabling percpu interrupts during recovery, which may lead to a complete loss of network connectivity...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.11 contains security vulnerabilities. These vulnerabilities stem from the use of incorrect loop indices during DMA cleanup, resulting in memory leaks and repeated unmappings of memory blocks...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.13 contains a security vulnerability. This vulnerability stems from the createsdwdailinks function, which lacks boundary checks when iterating through the socdais array. When all entries are initialized, the loop may read beyond the end of the array, resulting in...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.5 contains a security vulnerability. This vulnerability arises from the fact that after the mlx5iballoctransportdomain function allocates a transport domain, the transport domain is not released when the mlx5ibenablelb function fails, which may lead to resource leaks...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the insufficient validation of shift operation operands in the netfilter xtu32 component’s u32matchit function. Malicious u32 rules may provide shift counts of 32 or greater, leading to undefined shift out-of-bounds...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the function rt2x00libprobedev, which performs a full disassembly before initializing work items when detection fails, potentially leading to system crashes...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.18 contains a security vulnerability. This vulnerability stems from the kfdcriuresumesvm function, which releases memory without removing nodes from the linked list during the cleanup of criusvmmetadatalist. This could allow a render-group user without privileges to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from the fact that during peek operations, net/sched/schcodel discards data packets. Before restoring qlen, qdisctreereducebacklog is called, which may lead to the incorrect disabling of parent categories,...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the fiblookup function does not properly exit when performing route lookups. As a result, incorrect routes may be overwritten by other routes in the default table. This can lead to inconsistent route...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the btrfs zoned file system, which holds the zonedmetaiolock lock when writing metadata back. If this lock is not released while waiting for transactions to be committed, it can lead to a deadlock and cause the system to...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that when calculating newlen in rtwpcirxnapi, it does not verify whether the value exceeds the size of the DMA buffer, which may lead to out-of-bounds reads...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.5 contains security vulnerabilities. These vulnerabilities stem from the lack of fixing the upper-level rpcclnt in the SUNRPC TLS connection path, which may lead to reuse after release and underflow in reference counting...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities stem from the KVM s390 PCI module, which, when processing AIFs without a specified AISB and with AIF enabled, may store invalid physical addresses in the associated GAITE, potentially causing system anomalies...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.1.6 contain security vulnerabilities. These vulnerabilities arise from the CRIU checkpoint copy mechanism for MQD control stacks, which fails to limit the hardware size within the allocated BO area. As a result, memcpy operations may access adjacent GTT...

Undertow input validation error vulnerability

Undertow has a vulnerability related to input validation. This vulnerability stems from the parser in the ChunkReader component, which uses a single internal variable to store the remaining block size and status flags. Attackers can exploit this by sending specially crafted requests with an...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.1.6 contain security vulnerabilities. These vulnerabilities arise from the use of xastoreirq to store doorbells, without properly rejecting the assignment of reserved doorbells to new queues. This can lead to the incorrect routing of fence IRQ processing to...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 6.6.148, 6.12.101, 6.18.42, and 7.1.6 contain security vulnerabilities. These vulnerabilities arise from ksmbd prematurely stopping the copying of ACEs during size calculation overflow, causing the deduplication traversal to exceed the copied ACE array and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the lack of protection for operations that occur outside of memory regions. This could allow user applications to trigger CQP operations with a mkey value of 0...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the wacomparseandregister function, which starts the HID hardware before registering inputs and initializing pad LED/remotes. When subsequent steps fail, the error path does not stop the HID hardware before releasing Wac...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities are due to improper timing of device mapping releases, which may lead to device mapping leaks at incorrect paths...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the RDS TCP does not the sysctl table before removing the listening sockets. As a result, concurrent sysctl writes compete with the network namespace removal process, leading to the dereferencing of releas...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from improper handling of the error path in the nsmdevioctl function. Unlocking operations are performed without acquiring a mutex, which can lead to kernel lock imbalance errors...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the forgetcachedacl function, which does not retain the ACLDONTCACHE status. This may lead to the fuse file system returning cached ACL values that are outdated...

Red Hat OpenShift AI Permission and Access Control Vulnerabilities

Red Hat OpenShift AI has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper configuration of the MaaS Gateway in the model service environment. As a result, users with low privileges may intercept, read, record, and modify all MaaS model...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from xfrm incorrectly updating the skb-prev pointer when processing GSO segments, which may lead to reuse after deallocation...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.5 contains a security vulnerability. This vulnerability stems from the TAS2781 firmware parser, which does not verify the existence of the terminator of variable-length description strings during parsing, potentially leading to out-of-bounds read attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the csumpartial function incorrectly using the cksm target address when vector facilities are not available. This could lead to calculating the checksum from address zero...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the ice parser profileinit function not correctly verifying the range of the ptype parameter. As a result, out-of-bounds write operations to the bitmap occur, which may lead to kernel page errors or null pointer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from an issue in the xevmcreate function, where the error handling path does not unconditionally call xesvmfini when resv obj allocation fails, resulting in SVM resource leaks...

Red Hat OpenShift AI Permission and Access Control Vulnerabilities

Red Hat OpenShift AI has vulnerabilities related to permission granting and access control. These vulnerabilities allow attackers to bypass security enhancements by submitting malicious Argo workflows via the V1 API path. This enables the API server to create pods with elevated permissions, there...

Red Hat OpenShift AI Authorization Vulnerability

Red Hat OpenShift AI has an authorization issue vulnerability. This vulnerability stems from the default configuration set to “noauth”, and the absence of a security manager. This allows unauthorized remote attackers to access endpoints such as feature-server, registry-server, and offline-server...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.1 contains a security vulnerability. This vulnerability arises from the failure to clear the HCIUARTSENDING flag when writing data is canceled, which may lead to write operations being blocked after the device is reopened...

Google ML Metadata Resource Management Error Vulnerability

Google ML Metadata has a resource management vulnerability. This vulnerability stems from an outdated gRPC stack in the ml-metadata component. It exposes the system to HTTP/2 denial-of-service attacks. An attacker within the cluster can cause the MLMD Pod to crash by sending specially crafted...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from improper error handling during the replacement of the vxlan MDB remote entry source list. As a result, the EXCLUDE filter may lose its source and incorrectly forward traffic that should be blocked, or...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from the repeated release of the response buffer during the SMB2close function’s replay process...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.3 contains security vulnerabilities. These vulnerabilities stem from improper handling of error codes in the smb2aeadreqalloc function, which may lead to a crash when dereferencing invalid error pointers...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the failure of the filsdiscovery allocation process, during which the kfreercu function is called for the old template. If the allocation fails again later, the queued objects are released again, resulting in double...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from the function ieee80211vifupdatelinks, which fails when drvchangeviflinks does not remove the debugfs entries associated with the newly created links, or it does not stop the linking process. As a resul...

GNOME gnome-remote-desktop: Resource management error vulnerability

GNOME gnome-remote-desktop has a resource management vulnerability. This vulnerability stems from the inbound connection processor bypassing the connection limiter. It may allow unauthorized remote attackers to open a large number of parallel pre-authenticated connections, depleting resources and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from the perf/core component failing to properly separate event groups during removeonexec, resulting in corrupted lists of PMU context activities...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from an oversight in the PKEYVERIFYPROTK ioctl function, where the buffer length provided by the user space was not checked, potentially leading to a buffer overflow...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from the pkeypckmo handler, which does not check the length of the target buffer. As a result, the generated output data may exceed the size of the target buffer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains a security vulnerability. This vulnerability stems from the l2capsocknewconnectioncb function in Bluetooth L2CAP, which returns chans after releasing the parent lock. This allows other tasks to accept and release the child socket, resulting in reusing the...

Zephyr buffer error vulnerability

Zephyr versions from 3.0.0 to 4.5.0 have a buffer error vulnerability. This vulnerability stems from the user-space verifier zvrfylogfilterset in the subsys/logging/logmgmt.c file. This verifier performs signed comparisons on the int16t srcid parameter. Negative values can bypass the verification...

SiYuan cross-site scripting vulnerabilities

Versions of SiYuan v3.7.3 prior to the release of v3.7.3 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper SVG cleanup. Attackers could exploit this vulnerability by bypassing the HTML parser’s cleanup process, thereby hiding script tags within elements such...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from improper referencing of the net/handshake module file, which may lead to premature release of sockets, potentially causing system crashes or denial-of-service attacks...