24590 matches found
Use After Free in editcap
...
Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes
...
Glibc: stack read overflow in getaddrinfo in no-aaaa mode
...
ksmbd: add bounds check for create lease context
...
RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
...
udp: Fix memory accounting leak.
...
nfsd: put dl_stid if fail to queue dl_recall
...
nvme-rdma: unquiesce admin_q before destroy it
...
Out-of-bounds Read in Wireshark
...
ksmbd: prevent rename with empty string
...
netfilter: ipset: fix region locking in hash types
...
firmware: arm_scmi: Balance device refcount when destroying devices
...
Erlang/OTP SSH Has Strict KEX Violations
...
bpf: track changes_pkt_data property for global functions
...
page_pool: avoid infinite loop to schedule delayed worker
...
scsi: st: Fix array overflow in st_setup()
...
mtd: rawnand: brcmnand: fix PM resume warning
...
scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
...
driver core: fix potential NULL pointer dereference in dev_uevent()
...
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
...
net_sched: hfsc: Fix a UAF vulnerability in class handling
...
fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
...
ASoC: qcom: Fix sc7280 lpass potential buffer overflow
...
drm/v3d: Add job to pending list if the reset was skipped
...
net: ngbe: fix memory leak in ngbe_probe() error path
...
wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
...
ksmbd: fix the warning from __kernel_write_iter
...
containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.
...
QUIC certificate check skip with wolfSSL
...
Input: mtk-pmic-keys - fix possible null pointer dereference
...
usb: typec: ucsi: displayport: Fix deadlock
...
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
...
Bluetooth: btrtl: Prevent potential NULL dereference
...
net: mctp: Set SOCK_RCU_FREE
...
isofs: Prevent the use of too small fid
...
drm/amdkfd: Fix mode1 reset crash issue
...
udmabuf: fix a buf size overflow issue during udmabuf creation
...
net_sched: Flush gso_skb list too during ->change()
...
setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow
...
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
...
drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1
...
Bypass extraction filter to modify file metadata outside extraction directory
...
wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
...
Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service
...
Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service
...
Arbitrary writes via tarfile realpath overflow
...
cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands.
...
Requests vulnerable to .netrc credentials leak via malicious URLs
...