24590 matches found
drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
...
ksmbd: prevent out-of-bounds stream writes by validating *pos
...
ksmbd: fix use-after-free in kerberos authentication
...
In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.file`: a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set. This results in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory growth, leading to a denial of service. Impact: * This vulnerability affects APIs relying on `ReadFileUtf8` on Node.js release lines: v20 and v22.
...
Potential heap-buffer overflow vulnerability in NotepadNext
...
Usage of ExtKeyUsageAny disables policy validation in crypto/x509
...
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL
...
Linux-pam: linux-pam directory traversal
...
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
...
Unbounded recursion in Python Protobuf
...
media: streamzap: fix race between device disconnection and urb callback
...
net_sched: skbprio: Remove overly strict queue assertions
...
net: ibmveth: make veth_pool_store stop hanging
...
atm: Fix NULL pointer dereference
...
ksmbd: use aead_request_free to match aead_request_alloc
...
fs/ntfs3: Fix a couple integer overflows on 32bit systems
...
rtnetlink: Allocate vfinfo size for VF GUIDs when supported
...
ksmbd: add bounds check for durable handle context
...
acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
...
A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
...
Incorrect calculation on P256 curves in crypto/internal/nistec
...
arm64: Don't call NULL in do_compat_alignment_fixup()
...
jq has signed integer overflow in jv.c:jvp_array_write
...
GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption
...
In FRRouting (FRR) all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size
...
Libopensc: incorrect handling length of buffers or files in libopensc
...
hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
...
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
...
KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
...
latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
...
net: ppp: Add bound checking for skb data on ppp_sync_txmung
...
i3c: Add NULL pointer check in i3c_master_queue_ibi()
...
bpf: consider that tail calls invalidate packet pointers
...
bnxt_en: Fix out-of-bound memcpy() during ethtool -w
...
irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
...
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
...
net_sched: ets: Fix double list add in class with netem as child qdisc
...
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
...
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
...
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
...
RDMA/core: Silence oversized kvmalloc() warning
...
ext4: ignore xattrs past end
...
net-tools Stack-based Buffer Overflow vulnerability
...
ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
...
net: dsa: free routing table on probe failure
...
drm/amd/pm: Prevent division by zero
...
f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
...
sctp: detect and prevent references to a freed transport in sendmsg
...