198126 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from the fact that during peek operations, net/sched/schcodel discards data packets. Before restoring qlen, qdisctreereducebacklog is called, which may lead to the incorrect disabling of parent categories,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains a security vulnerability. This vulnerability stems from the kfdcriuresumesvm function, which releases memory without removing nodes from the linked list during the cleanup of criusvmmetadatalist. This could allow a render-group user without privileges to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the netfilter nfnat module, where an invalid natnet pointer is used when nfnatinit fails, potentially leading to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.17 contains a security vulnerability. This vulnerability stems from improper allocation of the HV VHCA stats buffer; zero-sized buffers were allocated, which may lead to null pointer dereferencing and cause the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from PF attempting to process FASTREQUEST or EVENT messages, which may lead to violation of the VFPF ABI protocol and trigger assertions on the PF side...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an insufficient length check in the brcmfnotifyauthframerx function when processing short authentication frames. As a result, unsigned subtraction recursion can lead to a stack overflow, potentially allowing a remote...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from the improper handling of 0 count inputs by the dmafencededuparray function, which may lead to dereferencing uninitialized fence slots...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the ASoC SOF ipc4-control component not verifying the size of theMODULENOTIFICATION notification payload. This could lead to out-of-bounds read attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.20 contains a security vulnerability. This vulnerability stems from the btrfsrundelayedrefs function in btrfs, which does not set lockedref to NULL when handling the-EAGAIN error pointer returned by btrfsselectrefhead. As a result, invalid pointers may be dereferenced,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the md/raid10 driver failing to properly reset readslot when reusing the r10bio for the discard operation. As a result, the replaced bio may not be properly released, leading to resource leaks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from race conditions in BTT lane acquisition. Spinlocks and the per-CPU recursive counting model become ineffective after the lane becomes preemptible. This allows other tasks to bypass locking and concurrently use the same...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains a security vulnerability. This vulnerability arises from the error path being returned directly when the mlx5odppopulatexlt function fails. This causes the XLT buffer cleanup to be skipped, leading to DMA mapping and buffer leaks. Additionally, it may cause...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from the capablewrtmount function, which fails to properly handle detached mount points, leading to null pointer dereferencing and potentially causing the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.7 contains security vulnerabilities. These vulnerabilities stem from mismatches in reserved billing within the hugetlb cgroup, which may lead to underflow of page counters...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.3 contains a security vulnerability. This vulnerability stems from improper management of the reference count in rlkref within xprtrdma. It may lead to requests being released while the hardware is still reading the send buffer, resulting in reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the zappages function, which fails to correctly acquire the mmaplock when calling zapvmarange. There is a lock order issue, which may lead to deadlocks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.2 contains a security vulnerability. This vulnerability stems from the skbflowdissect function in net/core/flowdissector.c, which does not check the validity of the device type and macheader when requestingFLOWDISSECTORKEYETHADDRS. It also reads the 12-byte data of...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from a TOCTOU issue in the sofipc4bytesput function. The copy size is based on the old data-size instead of the new data size, which may lead to truncation of valid data or copying of outdated bytes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient QoS validation, which fails to properly reject ATM traffic categories that exceed ATMANYCLASS. As a result, out-of-bounds read access may occur when reading from /proc/net/atm/pvc...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from a buffer overflow in the FEC calculation of dm-verity. Improper validation of the erase count leads to out-of-bounds writes, potentially causing memory corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.6 contains security vulnerabilities. These vulnerabilities stem from KVM’s improper handling of PV EOI requests. When reading guest memory fails and PV EOI is disabled for vCPUs, it may lead to kernel crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the ntfs3 driver not correctly limiting the tomove size in the indxinsertintoroot function, which may lead to uncontrolled out-of-bounds writes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from the iceresetallvfs function, which resets all VFs. During this process, VF resources enabled by the FDIR filter are leaked, and the CTRL VSI is only disabled without proper release of resources...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from a registration race condition in the HV VHCA stats agent. This condition may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the direct modification of the blockmanager buffer’s superblock heldroot by the reservemetadatasnap and releasemetadatasnap functions. If subsequent metadata submissions fail, it may lead to inconsistent metadata...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the BPF map update and deletion paths, which call the bpfobjfreefields function when values are replaced or reclaimed. As a result, the destruction of fields depends on the operation context. In a NMI context, potentiall...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities stem from TOCTOU issues in the processing of data size in the sofipc3bytesput and sofipc3bytesget functions, which may lead to data truncation or copying of expired bytes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability arises from a race condition between the device removal and the processing of incoming MLD queries. This can lead to reuse after release, resulting in a kernel crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a failure in the linkconf or linksta lookup during the mt7996txprepareskb routine. As a result, the allocated tx tokens are not released when the lookup fails, potentially leading to token leakage...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient boundary checking during the traversal of the sofdais array by the createsdwdailinks function, which may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper reference counting management of svcxprt during asynchronous TLS handshake callbacks. Competition conditions may occur, potentially leading to reuse after release and kernel memory corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from a cancellation race condition in svctcphandshake. This condition may cause the xptflags variable to be read before it has been submitted as a callback. As a result, handshake calls may be called...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a race condition in the makeuffdwphugepte function located in fs/proc/taskmmu.c during updates to prot, which may lead to the loss of hardware Dirty/Accessed updates...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from an error in the data type of the scan index handled by the rtw89 driver. This error causes an infinite loop during Wi-Fi scanning at the 6GHz frequency band, potentially leading to kernel softlock and...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.39 has a security vulnerability. This vulnerability stems from an integer overflow issue in the radeon-alignpitch function. It may lead to overflow of signed integers during alignment rounding addition and final calculations, resulting in the return of an invalid pitc...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the function rt2x00libprobedev, which performs a full disassembly before initializing work items when detection fails, potentially leading to system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from accessing isopisk-conn in the isosockgetname function without holding the locksock lock, which may lead to race conditions...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.5 contains a security vulnerability. This vulnerability arises from the lack of checking the ROM header and data structure addresses before accessing PCI ROM data. This could lead to out-of-bounds access, resulting in system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 contains security vulnerabilities. These vulnerabilities stem from the fact that the WQE fields in the non-SRQ receiving path are directly mapped from the shared queue buffer in the user space. This allows malicious users to modify the numsge or sge entries, resulting...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.6 contains a security vulnerability. This vulnerability stems from the ifedecode function in the net/ife/ife.c file, which does not properly validate the length of the inner Ethernet header. As a result, it may lead to system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the regulatorlocktwo function, which incorrectly uses-EDEADLOCK instead of-EDEADLK when comparing return values. When lock contention occurs, the lock cannot be properly released and retried, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.14 contains a security vulnerability. This vulnerability stems from the rpcrdmaisbcall function in the xprtrdma module, which does not check the buffer boundary when decoding response packets. This leads to out-of-bounds reads. Additionally, the short header processing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.17 contains a security vulnerability. This vulnerability stems from insufficient validation of the user-controlled shift parameter in CONNMARK target Revision 2. When shiftbits is 32 or greater, undefined shifting behavior may occur...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the vxlangropreparereceive function does not check whether skuserdata is empty. This value may be set to NULL by the udptunnelsockrelease function, which could lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the incorrect checking of whether the target cluster is idle when moving extents in ocfs2. This can lead to file data being written to clusters that are already occupied by other inodes, resulting in data corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient checks on the length of IPv6 extension headers in the netfilter ip6tables functions involving the ah, hbh, and rt matching pairs. This may allow malformed packets to bypass the intended discard rules...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper handling of the state of the addrconfdadfailure function in the ipv6 addrconf module. When addresses are deleted concurrently, it is possible to access already released list items, leading to a kernel crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper handling of CPU hot-plug callback errors. The reuse of rollback path return values causes the original errors to be hidden, potentially making failed state transitions appear as successful ones...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the failure to cancel the work items of pre-allocations when the afs network namespace is removed, which may lead to resources not being released properly...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the fiblookup function does not properly exit when performing route lookups. As a result, incorrect routes may be overwritten by other routes in the default table. This can lead to inconsistent route...