23144 matches found
Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service
...
usb: typec: ucsi: displayport: Fix deadlock
...
ksmbd: Fix UAF in __close_file_table_ids
...
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
...
drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
...
book3s64/radix : Align section vmemmap start address to PAGE_SIZE
...
pds_core: remove write-after-free of client_id
...
net_sched: ets: Fix double list add in class with netem as child qdisc
...
net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
...
pds_core: make wait_context part of q_info
...
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
...
scsi: st: Fix array overflow in st_setup()
...
KVM: arm64: Tear down vGIC on failed vCPU creation
...
cifs: avoid NULL pointer dereference in dbg call
...
mtd: rawnand: brcmnand: fix PM resume warning
...
iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
...
tracing: Verify event formats that have "%*p.."
...
octeon_ep: Fix host hang issue during device reboot
...
tar-fs has issue where extract can write outside the specified dir with a specific tarball
...
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
...
media: venus: hfi: add a check to handle OOB in sfr region
...
wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
...
ipvs: fix uninit-value for saddr in do_output_route4
...
QUIC certificate check skip with wolfSSL
...
memblock: Accept allocated memory before use in memblock_double_array()
...
OPA server Data API HTTP path injection of Rego
...
net: phy: leds: fix memory leak
...
block: fix resource leak in blk_register_queue() error path
...
ASoC: qcom: Fix sc7280 lpass potential buffer overflow
...
Input: mtk-pmic-keys - fix possible null pointer dereference
...
iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
...
redis-check-aof may lead to stack overflow and potential RCE
...
Use-after-free in "unicode_escape" decoder with error handler
...
wifi: wl1251: fix memory leak in wl1251_tx_work
...
KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
...
drm/v3d: Add job to pending list if the reset was skipped
...
wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
...
ftrace: Add cond_resched() to ftrace_graph_set_hash()
...
sch_htb: make htb_qlen_notify() idempotent
...
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
...
vxlan: vnifilter: Fix unlocked deletion of default FDB entry
...
Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
...
containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.
...
undici Denial of Service attack via bad certificate data
...
openvswitch: Fix unsafe attribute parsing in output_userspace()
...
wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
...
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
...
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
...