23143 matches found
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
...
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
...
hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
...
BCryptGenerateSymmetricKey memory leak
...
In FRRouting (FRR) all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size
...
When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.
...
Improper Handling of Missing Values in Wireshark
...
GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption
...
KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
...
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
...
nvme-rdma: unquiesce admin_q before destroy it
...
Grub2: net: out-of-bounds write in grub_net_search_config_file()
...
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
...
NULL Pointer Dereference in Wireshark
...
A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
...
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
...
A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
...
An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
...
ksmbd: add bounds check for create lease context
...
atm: Fix NULL pointer dereference
...
spufs: fix gang directory lifetimes
...
media: venus: hfi_parser: refactor hfi packet parsing logic
...
ext4: fix off-by-one error in do_split
...
net_sched: drr: Fix double list add in class with netem as child qdisc
...
net: lan743x: Fix memleak issue when GSO enabled
...
mtd: inftlcore: Add error check for inftl_read_oob()
...
net: dsa: clean up FDB, MDB, VLAN entries on unbind
...
HID: pidff: Fix null pointer dereference in pidff_find_fields
...
pm: cpupower: bench: Prevent NULL dereference on malloc failure
...
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
...
arm64: Don't call NULL in do_compat_alignment_fixup()
...
acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
...
nfsd: put dl_stid if fail to queue dl_recall
...
wifi: mac80211: Purge vif txq in ieee80211_do_stop()
...
ksmbd: Fix dangling pointer in krb_authenticate
...
i2c: cros-ec-tunnel: defer probe if parent EC is not present
...
virtiofs: add filesystem context source name check
...
crypto: null - Use spin lock instead of mutex
...
spi: spi-imx: Add check for spi_imx_setupxfer()
...
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
...
usb: dwc3: gadget: check that event count does not exceed event buffer length
...
net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
...
net: openvswitch: fix nested key length validation in the set() action
...
jfs: Prevent copying of nlink with value 0 from disk inode
...
drm/amd/pm: Prevent division by zero
...
net: libwx: handle page_pool_dev_alloc_pages error
...
drm/nouveau: prime: fix ttm_bo_delayed_delete oops
...
RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
...