24590 matches found
Incorrect calculation on P256 curves in crypto/internal/nistec
...
latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
...
Libopensc: incorrect handling length of buffers or files in libopensc
...
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
...
ClamAV PDF Scanning Buffer Overflow Vulnerability
...
When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.
...
net_sched: qfq: Fix double list add in class with netem as child qdisc
...
memblock: Accept allocated memory before use in memblock_double_array()
...
Extraction filter bypass for linking outside extraction directory
...
drm/amd/display: check stream id dml21 wrapper to get plane_id
...
Grub2: net: out-of-bounds write in grub_net_search_config_file()
...
usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
...
drm/i915/huc: Fix fence not released on early probe errors
...
mfd: ene-kb3930: Fix a potential NULL pointer dereference
...
smb: client: Avoid race in open_cached_dir with lease breaks
...
mtd: inftlcore: Add error check for inftl_read_oob()
...
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
...
ksmbd: Fix dangling pointer in krb_authenticate
...
jfs: Fix uninit-value access of imap allocated in the diMount() function
...
tipc: fix memory leak in tipc_link_xmit
...
LoongArch: BPF: Fix off-by-one error in build_prologue()
...
Bluetooth: btnxpuart: Fix kernel panic during FW release
...
spufs: fix a leak in spufs_create_context()
...
ocfs2: validate l_tree_depth to avoid out-of-bounds access
...
net: decrease cached dst counters in dst_release
...
ftrace: Add cond_resched() to ftrace_graph_set_hash()
...
sch_htb: make htb_qlen_notify() idempotent
...
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
...
pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
...
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
...
usb: dwc3: gadget: check that event count does not exceed event buffer length
...
net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
...
9p/net: fix improper handling of bogus negative read/write replies
...
drm/nouveau: prime: fix ttm_bo_delayed_delete oops
...
net: vlan: don't propagate flags on open
...
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
...
net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
...
virtiofs: add filesystem context source name check
...
RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
...
jfs: Prevent copying of nlink with value 0 from disk inode
...
drm/amd/pm: Prevent division by zero
...
jfs: add sanity check for agwidth in dbMount
...
vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
...
spufs: fix a leak on spufs_new_file() failure
...
Access of Uninitialized Pointer in Wireshark
...
btrfs: fix qgroup reserve leaks in cow_file_range
...
An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
...
Improper Handling of Missing Values in Wireshark
...