24590 matches found
vsock: Do not allow binding to VMADDR_PORT_ANY
...
net/sched: Abort __tc_modify_qdisc if parent class does not exist
...
i2c: qup: jump out of the loop in case of timeout
...
lib: objagg: Fix general protection fault
...
squashfs: harden sanity check in squashfs_read_xattr_id_table
...
Incorrect results returned from Rows.Scan in database/sql
...
mtk-sd: Prevent memory corruption from DMA map failure
...
nfs: pass explicit offset/count to trace events
...
can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
...
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
...
Rustls: rustls network-reachable panic in `acceptor::accept`
...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
...
virtio-net: ensure the received length does not exceed allocated size
...
An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread.
...
smb: client: fix potential UAF in cifs_dump_full_key()
...
wifi: mac80211: reject TDLS operations when station is not associated
...
Unexpected paths returned from LookPath in os/exec
...
A memory corruption issue was found in DPDK versions 17.05 and above
...
webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser
...
During the worker lifecycle, a use-after-free condition could have occured, which could have led to a potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and Thunderbird < 115.0.1.
...
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attributeIn Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute
...
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
...
serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
...
gfs2: No more self recovery
...
fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
...
SMM IDT Privilege Escalation Vulnerability
...
Stack exhaustion in all Parse functions in go/parser
...
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
...
Nodes can bypass dynamic resource allocation authorization checks
...
platform/x86: think-lmi: Fix password opcode ordering for workstations
...
net: bridge: xmit: make sure we have at least eth header len bytes
...
proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
...
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.
...
drm/msm: Fix another leak in the submit error path
...
regulator: core: fix NULL dereference on unbind due to stale coupling data
...
firmware: qcom: scm: smc: Handle missing SCM device
...
Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
...
HDF5 h5 File H5SM.c H5SM_delete heap-based overflow
...
scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
...
parisc: fix a possible DMA corruption
...
NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
...
A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.
...
Unexpected command execution in untrusted VCS repositories in cmd/go
...
Arbitrary code execution during build via line directives in cmd/go
...
cmake cmForEachCommand.cxx ReplayItems assertion
...
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
...
Go Snowflake Driver has race condition when checking access to Easy Logging configuration file
...
vlan: fix memory leak in vlan_newlink()
...