24590 matches found
spi: fsl-qspi: use devm function instead of driver remove
...
hfsplus: remove mutex_lock check in hfsplus_free_extents
...
iommufd: Fix protection fault in iommufd_test_syz_conv_iova
...
btrfs: fix iteration of extrefs during log replay
...
Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.
...
crypto: arm64/neonbs - fix out-of-bounds access on short input
...
Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs
...
netfilter: xt_nfacct: don't assume acct name is null-terminated
...
ACPICA: Refuse to evaluate a method if arguments are missing
...
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
...
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.
...
ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
...
JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free
...
Excessive memory allocation in net/http and net/textproto
...
f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
...
netlink: Fix wraparounds of sk->sk_rmem_alloc.
...
jfs: reject on-disk inodes of an unsupported type
...
btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
...
NULL Pointer Dereference in mruby/mruby
...
JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion
...
net/packet: fix a race in packet_set_ring() and packet_notifier()
...
Null pointer deref in X509_issuer_and_serial_hash()
...
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.
...
jfs: fix array-index-out-of-bounds in dbAdjTree
...
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
...
net: Fix icmp host relookup triggering ip_rt_bug
...
vsock: Fix transport_{g2h,h2g} TOCTOU
...
JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference
...
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
...
rpmsg: virtio: Free driver_override when rpmsg_remove()
...
thermal: core: Free tzp copy along with the thermal zone
...
mtd: spinand: fix memory leak of ECC engine conf
...
NFSD: Limit the number of concurrent async COPY operations
...
Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.
...
Squid: denial of service in http digest authentication
...
In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.
...
net: drop UFO packets in udp_rcv_segment()
...
i2c: lpi2c: Avoid calling clk_get_rate during transfer
...
lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage.
...
md/raid1: Fix stack memory use after return in raid1_reshape
...
Squid: dos against http and https
...
f2fs: fix to avoid out-of-boundary access in devs.path
...
drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
...
net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
...
CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
...
urllib3 does not control redirects in browsers and Node.js
...
smb: client: fix potential UAF in cifs_stats_proc_show()
...
MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability
...