23144 matches found
wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
...
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
...
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
...
Sensitive headers not cleared on cross-origin redirect in net/http
...
driver core: fix potential NULL pointer dereference in dev_uevent()
...
Bluetooth: btrtl: Prevent potential NULL dereference
...
ksmbd: fix the warning from __kernel_write_iter
...
drm/amd/pm: Prevent division by zero
...
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
...
udmabuf: fix a buf size overflow issue during udmabuf creation
...
cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
...
isofs: Prevent the use of too small fid
...
drm/amd/pm: Prevent division by zero
...
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
...
module: ensure that kobject_put() is safe for module type kobjects
...
usb: typec: ucsi: displayport: Fix NULL pointer access
...
fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
...
mcb: fix a double free bug in chameleon_parse_gdd()
...
scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
...
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
...
net: mctp: Set SOCK_RCU_FREE
...
usb: cdns3: Fix deadlock when using NCM gadget
...
wifi: at76c50x: fix use after free access in at76_disconnect
...
ksmbd: fix use-after-free in smb_break_all_levII_oplock()
...
ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
...
wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
...
vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
...
mfd: ene-kb3930: Fix a potential NULL pointer dereference
...
net: decrease cached dst counters in dst_release
...
net: mvpp2: Prevent parser TCAM memory corruption
...
net-tools Stack-based Buffer Overflow vulnerability
...
LoongArch: Increase ARCH_DMA_MINALIGN up to 16
...
media: venus: hfi: add check to handle incorrect queue size
...
md: fix mddev uaf while iterating all_mddevs list
...
qibfs: fix _another_ leak
...
Crossbeam-channel: crossbeam-channel vulnerable to double free on drop
...
GNU Binutils objdump debug.c debug_type_samep memory corruption
...
GNU Binutils ld elflink.c elf_gc_sweep memory corruption
...
Ansible-core: ansible-core user may read/write unauthorized content
...
AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue
The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protecti...
Windows Graphics Component Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally...
Microsoft PC Manager Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
Windows Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Windows Print Spooler Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network...
Microsoft SharePoint Remote Code Execution Vulnerability
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Windows Storage Port Driver Information Disclosure Vulnerability
Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally...
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue
The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protecti...
Windows Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...