Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from a race condition between the dump and ipsetlist functions in netfilter:ipset. This race condition leads to reusing resources after release, potentially causing the kernel to crash...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.16 contains security vulnerabilities. These vulnerabilities stem from the correct locking mechanism used by Bluetooth L2CAP when releasing connections, which may lead to deadlocks...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.20 contains a security vulnerability. This vulnerability arises from the lack of synchronization of the skmsg sg.copy bitmap during the SG conversion process. As a result, externally supported entries may be exposed as writable data in the BPF storage, thereby allowing...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 2.6.32 and earlier contain security vulnerabilities. These vulnerabilities stem from a bug in the ioeventfd datamatch mechanism, specifically the reachability issue with BUGON. This issue may cause the kernel to crash during unaligned accesses...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from improper handling of protocol timers before the hdlcppp synchronization releases the hdlc state. This could lead to reuse after the release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the improper handling of the zero version count for file handles in NFSv4/flexfiles, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from an error in the network handshake module’s handling of parameter passing for the listspliceinit function when exiting a namespace. As a result, pending handshake requests are not properly cleaned up, a...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a lack of binding of the uarg before filling the zero-copy skb in the vsock/virtio mechanism. This may lead to the use of improperly bound skb during the rollback path, thereby causing resource release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from insufficient checks of the CAPNETADMIN privilege in the device network namespace. This vulnerability could allow attackers to rewrite tunnels in different network namespaces...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.19 has a security vulnerability. This vulnerability arises from the handling of IPv6 extension headers. In this process, the ip6parsetlv function caches network header pointers. However, the ipv6desthao function may call pskbexpandhead, which moves the skb header and...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from nfsd failing to properly clear the IDR slots when processing setlease, resulting in floating pointers. Additionally, the delayedwork not being initialized may trigger undefined behavior. The following versions are...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from a missing rollback logic for the hifont state and the screen buffer in the errout error path of the fbcondosetfont function. As a result, the state machine is damaged, potentially leading to out-of-bounds reads and kerne...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from improper management of file references during handshake request processing, which may lead to empty pointer readings or access to released memory...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.13 contains a security vulnerability. This vulnerability stems from the lack of boundary checks on the body pcifunc parameter in the rvumboxhandlerrepeventnotify function. As a result, a pcifunc value controlled by an attacker may lead to out-of-bounds write attacks...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 6.0 contain security vulnerabilities. These vulnerabilities stem from incorrect calculations of the fraggap value for the paged allocation path in the ipAppenddata function. This leads to insufficient size of the linear region, potentially causing memory erro...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from the maydecodefh function, which does not perform locking reads on mount::mntns. This leads to a reuse vulnerability after release. Attackers could exploit these conditions to cause information leaks,...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the dalvectorreserve function, which uses uint32t integer operations when calculating memory allocation. When values overflow, it silently wraps around to a smaller value, causing krealloc to return a buffer size that is...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that arises from empty pointer dereferencing or corrupted reference counting when devpasid is not found in the devpasids list. This can lead to reuse after deallocation. The following versions are affected: 6.12.57, 6.13.3, and 6.14...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from an integer truncation issue in the accel/ivpu IPC reception process. Forcing the data size provided by the firmware to a signed int may lead to a buffer overflow...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the ACK parser in rxrpc, which makes modifications to the skb during the extraction of the SACK table and potentially leads to incorrect access to buffers in fragmented UDP packets, resulting in...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.10 contains a security vulnerability. This vulnerability stems from a lack of lower bound checking in the isertloginrecvdone function located in drivers/infiniband/ulp/isert/ibisert.c. When calculating the length of the login request payload, no lower bound check is...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from a race condition in the drm/gem module’s changehandle ioctl function. This issue may lead to handle processing errors...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.35 has a security vulnerability. This vulnerability stems from the kl5kusb105 serial driver’s improper handling of buffer size when preparing for batch output buffers, which may lead to out-of-buffer writing...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 5.5 and earlier contain security vulnerabilities. These vulnerabilities arise from the failure of PHY detection, resulting in the failure to clean up the sfp upstream. This may lead to residual floating-point fields in the sfp-bus...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from the lack of buffer overflow checks in the MS getinfoioctl function. This vulnerability may lead to incorrect copying when the firmware returns information that exceeds the size of the buffer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from a lack of preemptive protection between the modtimer and refcountset functions in the reqskqueuehashreq function. This may lead to abnormal reference counting, which in turn can cause reclamation afte...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability stems from the absence of a chans lock, which may allow remote BLE devices to send specially crafted L2CAP ECRED reconfiguration responses. This could lead to the destruction of the channel list while another threa...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains a security vulnerability. This vulnerability arises from the regsafe function, which does not verify the consistency of base IDs when comparing scalar registers with BPFADDCONST. This may lead to state pruning errors, thereby allowing the creation of...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the SCTP protocol stack does not disable the lower half of the Bluetooth Header before calling udptunnelxmitskb. This may lead to unbalanced operations of devxmitrecursioninc/dec on different CPUs, resultin...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains security vulnerabilities. These vulnerabilities stem from a double release issue in the tipcbuf.Append function, which may lead to memory corruption...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability caused by a race condition issue, which may lead to reusing resources after release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from a problem with the use of reclaimed resources in the unixstreambpfupdateproto function, which may lead to an increase in local privileges...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the drm/xe/dma-buf module not properly handling the release of objects during the retry loop, which may lead to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from the incorrect number of bytes used during the recovery of the IV in the ccpaescomplete function, which can lead to a buffer overflow. The following versions are affected: 3.14...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from the NAT hook in the netfilter component failing to release ops through kfreercu at the wrong path, potentially causing issues when using dump hooks in the user space...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains security vulnerabilities. These vulnerabilities stem from the bonding driver’s improper implementation of RCU rules in 3ad mode, which may lead to data races...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from an error in error handling within the xeexecqueuecreateioctl function. This vulnerability may lead to reuse after deallocation attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the network layer’s improper handling of GSO packets, resulting in the failure to correctly retrieve header data. This can lead to the driver reading invalid memory, allowing attackers to trigger a denial-of-service...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the fact that the open-coded taskvma iterator does not call mmget to obtain the mm reference. This can lead to the release of the mmstruct during task concurrency exits, resulting in a reuse after...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.12.34 to 6.12.74 contain security vulnerabilities. This vulnerability arises from the use of Threaded NAPI in WireGuard devices, which causes the decryption process to completely stop under high network load, potentially leading to a denial-of-service attack...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from the futex subsystem, which violates strict pthread semantics when handling private default hash allocations. The misuse of CLONETHREAD leads to issues where shared memory is reclaimed and reused after...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the crushdecode function in the libceph component. When processing CEPHMSGOSDMAP messages, if the crush map contains at least one bucket and the values of the two algorithm fields are inconsistent, it may lead to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains security vulnerabilities. These vulnerabilities stem from SCTP’s improper handling of Stale Cookies, where it fails to properly clean up the output queue and invalidates the scheduler’s cache pointers, potentially leading to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from race conditions in the drm/xe/dma-buf code, which handle empty buffers and reusing after release. This could allow attackers to trigger reusing after release or null pointer dereferencing...

AOMedia libaom buffer error vulnerability

The AOMedia libaom vulnerability involves a buffer overflow issue, stemming from a heap buffer overflow in libaom. In the AV1 encoder’s Look-Ahead Processing LAP mode, when glaginframes is set to 1 or higher, the first-pass statistical loop bypasses the buffer protection around the loop. This...

AOMedia libaom buffer error vulnerability

The AOMedia libaom vulnerability involves a buffer overflow issue. This vulnerability stems from the lack of boundary checks in the SVC Scalable Video Coding layer ID control function. It allows for the setting of a spatiallayerid that exceeds the configured number of layers. This leads to...

AOMedia libaom buffer error vulnerability

AOMedia libaom has a security vulnerability. This vulnerability stems from the lack of boundary checks in the SVC layer ID control function. It allows attackers to inject arbitrary pointers into the loop refresh mapping field through carefully designed image pixel values, potentially leading to...

AOMedia libaom buffer error vulnerability

The AOMedia libaom vulnerability involves a buffer overflow issue. This vulnerability stems from insufficient boundary validation in the SVC layer ID control of the AV1 encoder. It allows attackers to overlap custom video frame pixels with the internal encoder layer’s context structure, thereby...

CyberArk Idira Privileged Session Manager path traversal vulnerability

CyberArk Idira Privileged Session Manager is a privileged session management platform developed by the American company CyberArk. Versions of CyberArk Idira Privileged Session Manager prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5 contained a path traversal vulnerability. This vulnerability stemmed...

MPEG-4 container plugin for Membrane Framework security vulnerabilities

The MPEG-4 container plugin for Membrane Framework is an open-source plugin developed by Membrane Framework for parsing and multiplexing MP4 containers. Versions of the MPEG-4 container plugin for Membrane Framework from 0.3.0 to 0.36.7 contained security vulnerabilities. These vulnerabilities...