195988 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the rungethighestvcn function’s failure to perform length boundary checks when parsing NTFS mapping pairs in the buffer, which may lead to out-of-bounds reads during mounting...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.39 has a security vulnerability. This vulnerability stems from an integer overflow issue in the radeon-alignpitch function. It may lead to overflow of signed integers during alignment rounding addition and final calculations, resulting in the return of an invalid pitc...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from PF attempting to process FASTREQUEST or EVENT messages, which may lead to violation of the VFPF ABI protocol and trigger assertions on the PF side...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the failure to cancel the work items of pre-allocations when the afs network namespace is removed, which may lead to resources not being released properly...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.18 contains a security vulnerability. This vulnerability stems from an error in the tuple deduplication logic of netfilter’s nfconncount function. The error involves incorrect comparison of the connection tracking area; the area direction bit mask is incorrectly passed ...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from the fact that during peek operations, net/sched/schcodel discards data packets. Before restoring qlen, qdisctreereducebacklog is called, which may lead to the incorrect disabling of parent categories,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.1 contains a security vulnerability. This vulnerability arises from dmearlycreate attempting to release tables that have been instantiated by dmswaptable when dmresume fails, which may lead to kernel anomalies...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the modification of the rdma-state field in net/9p/transrdma.c without holding the reqlock lock. This leads to a race condition, which may result in reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the incorrect termination of the netfilter ipset garbage collection mechanism. This could lead to the failure of the garbage collection process to terminate properly...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper handling of the state of the addrconfdadfailure function in the ipv6 addrconf module. When addresses are deleted concurrently, it is possible to access already released list items, leading to a kernel crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an error in calculating the allocation size of the flexible array element currentpath within the nvmenshead structure. In systems with sparse NUMA node IDs, this could lead to out-of-array access, resulting in system...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from a cancellation race condition in svctcphandshake. This condition may cause the xptflags variable to be read before it has been submitted as a callback. As a result, handshake calls may be called...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient boundary checking during the traversal of the sofdais array by the createsdwdailinks function, which may lead to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a failure in the linkconf or linksta lookup during the mt7996txprepareskb routine. As a result, the allocated tx tokens are not released when the lookup fails, potentially leading to token leakage...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.20 contains a security vulnerability. This vulnerability stems from the btrfsrundelayedrefs function in btrfs, which does not set lockedref to NULL when handling the-EAGAIN error pointer returned by btrfsselectrefhead. As a result, invalid pointers may be dereferenced,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.18 contains security vulnerabilities. These vulnerabilities stem from TOCTOU issues in the processing of data size in the sofipc3bytesput and sofipc3bytesget functions, which may lead to data truncation or copying of expired bytes...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the iSCSI ISID is dereferenced after the REGISTER AND MOVE operation but is still referenced afterward. As a result, it can be reused after being released, potentially leading to memory information leaks o...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from race conditions in the md/raid5 module, specifically in the breakstripebatchlist and raid5makerequest functions. These race conditions may cause processes to wait indefinitely...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a missing cleanup call in the error path during the initialization of the dellinit function. This may lead to residual resources such as registered notifiers, debugfs directories, keyboard backlight LEDs, and touchpad LE...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.17 contains a security vulnerability. This vulnerability stems from improper allocation of the HV VHCA stats buffer; zero-sized buffers were allocated, which may lead to null pointer dereferencing and cause the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the failure of dmintegritychecklimits, where the locked ranges are not unlocked after the failure, potentially leading to deadlocks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from the improper handling of 0 count inputs by the dmafencededuparray function, which may lead to dereferencing uninitialized fence slots...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the fact that the MIPI DSI and CSI domains share clock and reset control bits. This can lead to incorrect behavior when one domain disables shared resources while another domain remains active...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability caused by improper handling of the RDMACMEVENTADDRCHANGE event. Calling rpcrdmaepput before connection establishment leads to a reference count underflow, which may result in reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.5 contains security vulnerabilities. These vulnerabilities stem from repeated requests for WC pages with the same ucontext, which may lead to concurrent access issues...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the ASoC SOF ipc4-control component not verifying the size of theMODULENOTIFICATION notification payload. This could lead to out-of-bounds read attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the mbox handling of nixsetrxmode in VF, where it does not check whether the request comes from a VF. When the promiscuous and allmulti flags are set to false, it is possible to accidentally delete PF’s promiscuous and...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities stem from the KVM s390 PCI module, which, when processing AIFs without a specified AISB and with AIF enabled, may store invalid physical addresses in the associated GAITE, potentially causing system anomalies...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the ice parser profileinit function not correctly verifying the range of the ptype parameter. As a result, out-of-bounds write operations to the bitmap occur, which may lead to kernel page errors or null pointer...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the lack of protection for operations that occur outside of memory regions. This could allow user applications to trigger CQP operations with a mkey value of 0...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the RDS TCP does not the sysctl table before removing the listening sockets. As a result, concurrent sysctl writes compete with the network namespace removal process, leading to the dereferencing of releas...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.1.6 contain security vulnerabilities. These vulnerabilities arise from the use of xastoreirq to store doorbells, without properly rejecting the assignment of reserved doorbells to new queues. This can lead to the incorrect routing of fence IRQ processing to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the wacomparseandregister function, which starts the HID hardware before registering inputs and initializing pad LED/remotes. When subsequent steps fail, the error path does not stop the HID hardware before releasing Wac...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the repeated release of the response buffer during the SMB2close function’s replay process...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from the perf/core component failing to properly separate event groups during removeonexec, resulting in corrupted lists of PMU context activities...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from a race condition between the dump and ipsetlist functions in netfilter:ipset. This race condition leads to reusing resources after release, potentially causing the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel versions 2.6.32 and earlier contain security vulnerabilities. These vulnerabilities stem from a bug in the ioeventfd datamatch mechanism, specifically the reachability issue with BUGON. This issue may cause the kernel to crash during unaligned accesses...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a missing rollback logic for the hifont state and the screen buffer in the errout error path of the fbcondosetfont function. As a result, the state machine is damaged, potentially leading to out-of-bounds reads and kerne...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper handling of protocol timers before the hdlcppp synchronization releases the hdlc state. This could lead to reuse after the release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a lack of binding of the uarg before filling the zero-copy skb in the vsock/virtio mechanism. This may lead to the use of improperly bound skb during the rollback path, thereby causing resource release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that arises from empty pointer dereferencing or corrupted reference counting when devpasid is not found in the devpasids list. This can lead to reuse after deallocation. The following versions are affected: 6.12.57, 6.13.3, and 6.14...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.10 contains a security vulnerability. This vulnerability stems from a lack of lower bound checking in the isertloginrecvdone function located in drivers/infiniband/ulp/isert/ibisert.c. When calculating the length of the login request payload, no lower bound check is...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.15 contains security vulnerabilities. These vulnerabilities stem from a double release issue in the tipcbuf.Append function, which may lead to memory corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 contains security vulnerabilities. These vulnerabilities stem from the bonding driver’s improper implementation of RCU rules in 3ad mode, which may lead to data races...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.12.34 to 6.12.74 contain security vulnerabilities. This vulnerability arises from the use of Threaded NAPI in WireGuard devices, which causes the decryption process to completely stop under high network load, potentially leading to a denial-of-service attack...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the drm/xe/dma-buf module not properly handling the release of objects during the retry loop, which may lead to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability caused by a race condition issue, which may lead to reusing resources after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a problem with the use of reclaimed resources in the unixstreambpfupdateproto function, which may lead to an increase in local privileges...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the incorrect number of bytes used during the recovery of the IV in the ccpaescomplete function, which can lead to a buffer overflow. The following versions are affected: 3.14...
CyberArk Idira Privileged Session Manager path traversal vulnerability
CyberArk Idira Privileged Session Manager is a privileged session management platform developed by the American company CyberArk. Versions of CyberArk Idira Privileged Session Manager prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5 contained a path traversal vulnerability. This vulnerability stemmed...