195883 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a race condition in the makeuffdwphugepte function located in fs/proc/taskmmu.c during updates to prot, which may lead to the loss of hardware Dirty/Accessed updates...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from accessing isopisk-conn in the isosockgetname function without holding the locksock lock, which may lead to race conditions...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the incorrect termination of the netfilter ipset garbage collection mechanism. This could lead to the failure of the garbage collection process to terminate properly...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability caused by improper handling of the RDMACMEVENTADDRCHANGE event. Calling rpcrdmaepput before connection establishment leads to a reference count underflow, which may result in reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from the fact that during peek operations, net/sched/schcodel discards data packets. Before restoring qlen, qdisctreereducebacklog is called, which may lead to the incorrect disabling of parent categories,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from a cancellation race condition in svctcphandshake. This condition may cause the xptflags variable to be read before it has been submitted as a callback. As a result, handshake calls may be called...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the modification of the rdma-state field in net/9p/transrdma.c without holding the reqlock lock. This leads to a race condition, which may result in reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from PF attempting to process FASTREQUEST or EVENT messages, which may lead to violation of the VFPF ABI protocol and trigger assertions on the PF side...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper reference counting management of svcxprt during asynchronous TLS handshake callbacks. Competition conditions may occur, potentially leading to reuse after release and kernel memory corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the mbox handling of nixsetrxmode in VF, where it does not check whether the request comes from a VF. When the promiscuous and allmulti flags are set to false, it is possible to accidentally delete PF’s promiscuous and...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper cleanup after the failure of adding the Bluetooth MGMTL adv monitor. This may lead to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.1 contains a security vulnerability. This vulnerability arises from dmearlycreate attempting to release tables that have been instantiated by dmswaptable when dmresume fails, which may lead to kernel anomalies...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from race conditions in the md/raid5 module, specifically in the breakstripebatchlist and raid5makerequest functions. These race conditions may cause processes to wait indefinitely...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 contains security vulnerabilities. These vulnerabilities stem from a race condition between the interrupt affinity changes and the disabling of LPI, which may lead to reusing resources after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper handling of the state of the addrconfdadfailure function in the ipv6 addrconf module. When addresses are deleted concurrently, it is possible to access already released list items, leading to a kernel crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a missing cleanup call in the error path during the initialization of the dellinit function. This may lead to residual resources such as registered notifiers, debugfs directories, keyboard backlight LEDs, and touchpad LE...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an insufficient length check in the brcmfnotifyauthframerx function when processing short authentication frames. As a result, unsigned subtraction recursion can lead to a stack overflow, potentially allowing a remote...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from an error in the data type of the scan index handled by the rtw89 driver. This error causes an infinite loop during Wi-Fi scanning at the 6GHz frequency band, potentially leading to kernel softlock and...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the failure to cancel the work items of pre-allocations when the afs network namespace is removed, which may lead to resources not being released properly...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the netfilter nfnat module, where an invalid natnet pointer is used when nfnatinit fails, potentially leading to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the failure of dmintegritychecklimits, where the locked ranges are not unlocked after the failure, potentially leading to deadlocks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a failure in the linkconf or linksta lookup during the mt7996txprepareskb routine. As a result, the allocated tx tokens are not released when the lookup fails, potentially leading to token leakage...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.39 has a security vulnerability. This vulnerability stems from an integer overflow issue in the radeon-alignpitch function. It may lead to overflow of signed integers during alignment rounding addition and final calculations, resulting in the return of an invalid pitc...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the rungethighestvcn function’s failure to perform length boundary checks when parsing NTFS mapping pairs in the buffer, which may lead to out-of-bounds reads during mounting...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.17 contains a security vulnerability. This vulnerability stems from improper allocation of the HV VHCA stats buffer; zero-sized buffers were allocated, which may lead to null pointer dereferencing and cause the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the fact that the MIPI DSI and CSI domains share clock and reset control bits. This can lead to incorrect behavior when one domain disables shared resources while another domain remains active...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from the improper handling of 0 count inputs by the dmafencededuparray function, which may lead to dereferencing uninitialized fence slots...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from incorrect initialization of the device’s RB-tree node. If the device does not support ATS, the insertion operation is skipped. In subsequent detection attempts, the error path initializes the node to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.5 contains security vulnerabilities. These vulnerabilities stem from repeated requests for WC pages with the same ucontext, which may lead to concurrent access issues...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities stem from the KVM s390 PCI module, which, when processing AIFs without a specified AISB and with AIF enabled, may store invalid physical addresses in the associated GAITE, potentially causing system anomalies...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the lack of protection for operations that occur outside of memory regions. This could allow user applications to trigger CQP operations with a mkey value of 0...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the ice parser profileinit function not correctly verifying the range of the ptype parameter. As a result, out-of-bounds write operations to the bitmap occur, which may lead to kernel page errors or null pointer...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the repeated release of the response buffer during the SMB2close function’s replay process...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from the perf/core component failing to properly separate event groups during removeonexec, resulting in corrupted lists of PMU context activities...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a lack of binding of the uarg before filling the zero-copy skb in the vsock/virtio mechanism. This may lead to the use of improperly bound skb during the rollback path, thereby causing resource release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a missing rollback logic for the hifont state and the screen buffer in the errout error path of the fbcondosetfont function. As a result, the state machine is damaged, potentially leading to out-of-bounds reads and kerne...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that arises from empty pointer dereferencing or corrupted reference counting when devpasid is not found in the devpasids list. This can lead to reuse after deallocation. The following versions are affected: 6.12.57, 6.13.3, and 6.14...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.10 contains a security vulnerability. This vulnerability stems from a lack of lower bound checking in the isertloginrecvdone function located in drivers/infiniband/ulp/isert/ibisert.c. When calculating the length of the login request payload, no lower bound check is...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.15 contains security vulnerabilities. These vulnerabilities stem from a double release issue in the tipcbuf.Append function, which may lead to memory corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability caused by a race condition issue, which may lead to reusing resources after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the incorrect number of bytes used during the recovery of the IV in the ccpaescomplete function, which can lead to a buffer overflow. The following versions are affected: 3.14...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.12.34 to 6.12.74 contain security vulnerabilities. This vulnerability arises from the use of Threaded NAPI in WireGuard devices, which causes the decryption process to completely stop under high network load, potentially leading to a denial-of-service attack...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the drm/xe/dma-buf module not properly handling the release of objects during the retry loop, which may lead to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 contains security vulnerabilities. These vulnerabilities stem from the bonding driver’s improper implementation of RCU rules in 3ad mode, which may lead to data races...
CyberArk Idira Privileged Session Manager path traversal vulnerability
CyberArk Idira Privileged Session Manager is a privileged session management platform developed by the American company CyberArk. Versions of CyberArk Idira Privileged Session Manager prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5 contained a path traversal vulnerability. This vulnerability stemmed...
Google Chrome security vulnerabilities
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.115 contained a security vulnerability caused by a heap buffer overflow in the GPU. This vulnerability could allow a remote attacker with access to the renderer process to execute a sandbox escap...
Axios server-side request forge vulnerability
Axios is an open-source HTTP client developed by Axios, based on Promise a solution for asynchronous programming. There were code-related vulnerabilities in versions of Axios before 0.32.0 and 1.16.0. These vulnerabilities stemmed from unnormalized IPv4-to-Ipv6 address mappings, which could lead ...
Axios information leakage vulnerability
Axios is an open-source HTTP client developed by Axios. Versions of Axios prior to 0.32.0 and 1.16.0 have a vulnerability known as information leakage. This vulnerability arises from the Node.js HTTP adapter, which may disclose proxy credentials during redirection, potentially leading to these...
Certificate handling for haskell security vulnerabilities
Certificate Handling for Haskell is a X509 certificate processing and verification tool developed by Kazu Yamamoto. There are security vulnerabilities in Certificate Handling for Haskell. These vulnerabilities stem from the lack of enforcement of X.509 name constraints. This may allow TLS clients...
IBM Langflow security vulnerabilities
IBM Langflow is a visual process orchestration tool developed by the American multinational company International Business Machines IBM. Versions 1.0.0 to 1.9.1 of IBM Langflow contain security vulnerabilities. These vulnerabilities stem from insecure direct object references, which could allow...