KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() iso_get_sock() returns the parent socket with a reference held, which is dropped by sock_put() once the child socket has been set up. The error path taken when…
In the Linux kernel, the following vulnerability has been resolved: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Fix v9fs_issue_write() to update i_size and remote_i_size to the new size of the server file if we made it larger, using the start fpos and the count returned by…
In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the…
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbio_v7_9_handle_ras_controller_intr_no_bifring() dereferences ras and obj without checking either for NULL. Both amdgpu_ras_get_context() and amdgpu_ras_find_obj() can return…
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskb_carve() pskb_carve_inside_header() and pskb_carve_inside_nonlinear() remove the first bytes of a packet and reallocate skb->head. All the headers that were present…
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by…
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity data_ep_set_params() allocates each data URB for exactly u->packets isochronous frames, so urb->iso_frame_desc[] has u->packets slots and ctx->packets is the…
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release tail references on DELACTION failure A batched RTM_DELACTION request takes a temporary reference on each action before attempting any deletion. tcf_action_delete() clears each processed slot and drops…
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() scsi_cdl_enable() uses length fields returned by MODE SENSE to locate the ATA feature mode page in a 64-byte stack buffer. A target can report a total length shorter…
In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2c_atr_add_adapter() stores atr->adapter[chan_id] before i2c_add_adapter() so that the I2C bus notifier can match child clients during registration. On failure the channel…
In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy() length into response_buf, which is CY_MAX_INPUT bytes.
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pwm-fan) Stop RPM timer before freeing tach data sample_timer() rearms the RPM timer and accesses the devm-managed ctx->tachs and ctx->pulses_per_revolution arrays. The cleanup action which stops the timer is registered…
In the Linux kernel, the following vulnerability has been resolved: hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() nsensor->current_state is dynamically replaced as the sensor's state changes. update_numeric_sensor_from_wobj() does this by freeing the old string and installing a…
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown wcn36xx_dxe_deinit() tears down the TX ack timer with timer_delete(), which only dequeues the timer and does not wait for a callback that is already executing;…
In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject TKIP frames without a full MIC libipw_michael_mic_verify() assumes that an skb contains an eight-byte Michael MIC. A short TKIP frame makes the unsigned payload length wrap, causing michael_mic() to read…
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: refuse to make a monitor active when it has no queue A monitor interface only gets a TXQ if it's created active, and one can't be added later. Setting the flag on a down interface is still allowed, so the driver…
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix rmmio iounmap skipped on device removal amdgpu_pci_remove() calls drm_dev_unplug() before fini_sw(), so drm_dev_enter() is already false there and the iounmap() guarded by it is skipped. This .remove path runs on…
Błąd w jądrze Linuxa umożliwia zdalne wywołanie paniki systemu przez nieprawidłowe zarządzanie danymi.
Błąd w jądrze Linuxa w sterowniku ice prowadzi do awarii jądra podczas zwalniania PTP.
Przepełnienie całkowitej liczby w jądrze Linuxa w parserze GARP prowadzi do ignorowania zdarzeń.
Błąd dzielenia przez zero w batman-adv w jądrze Linux może prowadzić do awarii systemu.
Przepełnienie listy unacked w batman-adv w jądrze Linux może prowadzić do wyczerpania pamięci.
Błąd w jądrze Linuxa pozwala na wyciek pakietów po wyłączeniu interfejsu.
Błąd w jądrze Linuxa w sterowniku ath11k prowadzi do podwójnego zwolnienia pamięci.
In the Linux kernel, the following vulnerability has been resolved: arm64/pageattr: Propagate return value from __change_memory_common The rodata=on security measure requires that any code path which does vmalloc -> set_memory_ro/set_memory_rox must protect the linear map alias too. Therefore,…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in… | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() iso_get_sock() returns the parent socket with a reference held, which is dropped by sock_put() once the child socket has been set up. The error path taken when… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Fix… | In the Linux kernel, the following vulnerability has been resolved: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Fix v9fs_issue_write() to update i_size and remote_i_size to the new size of the server file if we made it larger, using the start fpos and the count returned by… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching… | In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before… | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbio_v7_9_handle_ras_controller_intr_no_bifring() dereferences ras and obj without checking either for NULL. Both amdgpu_ras_get_context() and amdgpu_ras_find_obj() can return… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after… | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskb_carve() pskb_carve_inside_header() and pskb_carve_inside_nonlinear() remove the first bytes of a packet and reallocate skb->head. All the headers that were present… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized… | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB… | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity data_ep_set_params() allocates each data URB for exactly u->packets isochronous frames, so urb->iso_frame_desc[] has u->packets slots and ctx->packets is the… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release tail references on DELACTION failure A… | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release tail references on DELACTION failure A batched RTM_DELACTION request takes a temporary reference on each action before attempting any deletion. tcf_action_delete() clears each processed slot and drops… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: scsi: core: Validate MODE SENSE lengths in… | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() scsi_cdl_enable() uses length fields returned by MODE SENSE to locate the ATA feature mode page in a 64-byte stack buffer. A target can report a total length shorter… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add… | In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2c_atr_add_adapter() stores atr->adapter[chan_id] before i2c_add_adapter() so that the I2C bus notifier can match child clients during registration. On failure the channel… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size… | In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy() length into response_buf, which is CY_MAX_INPUT bytes. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: hwmon: (pwm-fan) Stop RPM timer before freeing tach… | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pwm-fan) Stop RPM timer before freeing tach data sample_timer() rearms the RPM timer and accesses the devm-managed ctx->tachs and ctx->pulses_per_revolution arrays. The cleanup action which stops the timer is registered… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: hwmon: (hp-wmi-sensors) Fix use-after-free in… | In the Linux kernel, the following vulnerability has been resolved: hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() nsensor->current_state is dynamically replaced as the sensor's state changes. update_numeric_sensor_from_wobj() does this by freeing the old string and installing a… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: Fix potential use-after-free in TX ack timer… | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown wcn36xx_dxe_deinit() tears down the TX ack timer with timer_delete(), which only dequeues the timer and does not wait for a callback that is already executing;… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject TKIP frames without a full… | In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject TKIP frames without a full MIC libipw_michael_mic_verify() assumes that an skb contains an eight-byte Michael MIC. A short TKIP frame makes the unsigned payload length wrap, causing michael_mic() to read… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: refuse to make a monitor active when it has no… | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: refuse to make a monitor active when it has no queue A monitor interface only gets a TXQ if it's created active, and one can't be added later. Setting the flag on a down interface is still allowed, so the driver… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix rmmio iounmap skipped on device… | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix rmmio iounmap skipped on device removal amdgpu_pci_remove() calls drm_dev_unplug() before fini_sw(), so drm_dev_enter() is already false there and the iounmap() guarded by it is skipped. This .remove path runs on… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Błąd w jądrze Linuxa umożliwia zdalne wywołanie paniki systemu przez nieprawidłowe zarządzanie danymi. | Błąd w jądrze Linuxa umożliwia zdalne wywołanie paniki systemu przez nieprawidłowe zarządzanie danymi. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Błąd w jądrze Linuxa w sterowniku ice prowadzi do awarii jądra podczas zwalniania PTP. | Błąd w jądrze Linuxa w sterowniku ice prowadzi do awarii jądra podczas zwalniania PTP. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Przepełnienie całkowitej liczby w jądrze Linuxa w parserze GARP prowadzi do ignorowania zdarzeń. | Przepełnienie całkowitej liczby w jądrze Linuxa w parserze GARP prowadzi do ignorowania zdarzeń. |
Do weryfikacji | Nieustalone | 0,17 % | ||
| Błąd dzielenia przez zero w batman-adv w jądrze Linux może prowadzić do awarii systemu. | Błąd dzielenia przez zero w batman-adv w jądrze Linux może prowadzić do awarii systemu. |
Do weryfikacji | Nieustalone | 0,17 % | ||
| Przepełnienie listy unacked w batman-adv w jądrze Linux może prowadzić do wyczerpania pamięci. | Przepełnienie listy unacked w batman-adv w jądrze Linux może prowadzić do wyczerpania pamięci. |
Do weryfikacji | Nieustalone | 0,17 % | ||
| Błąd w jądrze Linuxa pozwala na wyciek pakietów po wyłączeniu interfejsu. | Błąd w jądrze Linuxa pozwala na wyciek pakietów po wyłączeniu interfejsu. |
Do weryfikacji | Nieustalone | 0,17 % | ||
| Błąd w jądrze Linuxa w sterowniku ath11k prowadzi do podwójnego zwolnienia pamięci. | Błąd w jądrze Linuxa w sterowniku ath11k prowadzi do podwójnego zwolnienia pamięci. |
Do weryfikacji | Nieustalone | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: arm64/pageattr: Propagate return value from… | In the Linux kernel, the following vulnerability has been resolved: arm64/pageattr: Propagate return value from __change_memory_common The rodata=on security measure requires that any code path which does vmalloc -> set_memory_ro/set_memory_rox must protect the linear map alias too. Therefore,… |
Do weryfikacji | Nieustalone | 0,17 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.