24590 matches found
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
...
Improper handling of HTML-like comments in script contexts in html/template
...
smb: client: fix potential deadlock when releasing mids
...
Libarchive: reading past eof may be triggered for piped file streams
...
wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
...
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
...
HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference
...
wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
...
A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.
...
Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks
...
power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
...
nbd: fix uaf in nbd_genl_connect() error path
...
An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
...
bpf: Disable migration in nf_hook_run_bpf().
...
maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
...
Libsoup: denial of service attack to websocket server
...
cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
...
PCI: pnv_php: Clean up allocated IRQs on unplug
...
net: stmmac: Fix accessing freed irq affinity_hint
...
block: fix integer overflow in BLKSECDISCARD
...
9p: add missing locking around taking dentry fid list
...
clk: davinci: Add NULL check in davinci_lpsc_clk_register()
...
drm/gem: Acquire references on GEM handles for framebuffers
...
xsk: Fix race condition in AF_XDP generic RX path
...
An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component.
...
Backticks not treated as string delimiters in html/template
...
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
...
vsock: Fix transport_* TOCTOU
...
vfio/pds: Fix missing detach_ioas op
...
smb: client: fix warning when reconnecting channel
...
drm/amd/display: Check phantom_stream before it is used
...
drm/i915/gt: Cleanup partial engine discovery failures
...
HDF5 H5FL.c H5FL__malloc memory leak
...
CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS
...
An issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the Header_populateFromSettings function.
...
PCI: pnv_php: Fix surprise plug detection and recovery
...
Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled
...
cifs: Fix UAF in cifs_demultiplex_thread()
...
libxml2 xmlcatalog xmlParseSGMLCatalog recursion
...
nilfs2: reject invalid file types when reading inodes
...
HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow
...
vmxnet3: unregister xdp rxq info in the reset path
...
tcp: Correct signedness in skb remaining space calculation
...
Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23083.
...
Grub2: grub-core/gettext: integer overflow leads to heap oob write.
...
spi: stm32: Check for cfg availability in stm32_spi_probe
...
sctp: add mutual exclusion in proc_sctp_do_udp_port()
...
vsock/vmci: Clear the vmci transport packet properly when initializing it
...
clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
...
Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses.
...