24590 matches found
mm/vmscan: don't try to reclaim hwpoison folio
...
An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on network connections secured with TLS. The original implementation of smtp.PlainAuth in Go 1.0 enforced this requirement, and it was documented to do so. In 2013, upstream issue #5184, this was changed so that the server may decide whether PLAIN is acceptable. The result is that if you set up a man-in-the-middle SMTP server that doesn't advertise STARTTLS and does advertise that PLAIN auth is OK, the smtp.PlainAuth implementation sends the username and password.
...
wifi: ath11k: fix RCU stall while reaping monitor destination ring
...
drm/amdgpu: add list empty check to avoid null pointer issue
...
The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.
...
smb: client: fix use-after-free in smb2_query_info_compound()
...
Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126.
...
drm/amd/display: Add a dc_state NULL check in dc_state_release
...
Elasticsearch Uncontrolled Resource Consumption vulnerability
...
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.
...
drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update
...
A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function.
...
Buildah: buildah allows arbitrary directory mount
...
md: Don't ignore suspended array in md_check_recovery()
...
Libsoup: cookie domain validation bypass via uppercase characters in libsoup
...
wifi: rtw89: avoid to add interface to list twice when SER
...
drm/amd/display: Avoid overflow from uint32_t to uint8_t
...
An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow.
...
Bluetooth: msft: fix slab-use-after-free in msft_do_close()
...
An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.
...
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.
...
x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
...
spmi: mediatek: Fix UAF on device remove
...
virtiofs: use pages instead of pointer for kernel direct IO
...
rv: Use strings in da monitors tracepoints
...
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.
...
drm/amd/display: Adding array index check to prevent memory corruption
...
S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().
...
ibmvnic: Add tx check to prevent skb leak
...
Default mimetype known files writeable on Windows
...
md: Don't ignore read-only array in md_check_recovery()
...
s390/mm: Fix in_atomic() handling in do_secure_storage_access()
...
Use after free in Wasmtime
...
reiserfs: Avoid touching renamed directory if parent does not change
...
wifi: ath12k: Avoid memory leak while enabling statistics
...
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length.
...
drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
...
mm: fix uprobe pte be overwritten when expanding vma
...
drm/amd/display: Ensure array index tg_inst won't be -1
...
virtio-pci: Check if is_avq is NULL
...
wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
...
drm/amd/display: Check null pointers before multiple uses
...
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().
...
ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
...
Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall
...
drm/amd/display: Skip Recompute DSC Params if no Stream on Link
...
This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.
...
Reference counting in php_request_shutdown causes Use-After-Free
...