CVE Vulnerability Catalog

A vulnerability has been identified in the Linux kernel within the command_file_write function, leading to out-of-bounds reads due to missing size checks. An attacker can exploit this flaw to leak kernel memory.

A vulnerability has been identified in the Linux kernel related to improper management of partition descriptors in UDF images. Repeatedly appending the same descriptors can lead to out-of-bounds writes, potentially causing security issues.

A vulnerability has been identified in the Linux kernel within the testdrv_probe() function, leading to a use-after-free error. The issue arises from an incorrect release of the 'dn' pointer, which may result in the use of a freed object.

A use-after-free vulnerability was discovered in the Linux kernel's GFS2 filesystem inline data write path. The metadata buffer head (dibh) is released prematurely in gfs2_iomap_begin() while iomap->inline_data still points to its data, leading to a write to freed memory. This can compromise system integrity.

A vulnerability has been identified in the Linux kernel related to job scheduling in hardware context during resource release. This can lead to use-after-free errors and system crashes.

A use-after-free (UAF) vulnerability was identified in the Linux kernel's rlb_arp_recv function, which may lead to a null pointer dereference during rapid bond up/down cycles.

A vulnerability in the Linux kernel has been fixed that could lead to system crashes due to incorrect usage of the cleanup function kfree. The issue stemmed from incorrectly annotating a local pointer variable, resulting in the wrong address being passed to kfree.

A vulnerability has been identified in the Linux kernel that allows direct dereferencing of a user pointer in the vidi_connection_ioctl() function. This enables access to kernel memory from user space.

A vulnerability was identified in the Linux kernel that led to an infinite loop in the rcu_read_unlock() function due to IRQ work. It has been fixed by introducing a flag before calling raise_softirq_irqoff().

A vulnerability has been identified in the Linux kernel within the vidi_connection_ioctl() function, which may lead to errors such as null pointer dereferences and out-of-bounds errors. The issue arises from incorrectly obtaining the vidi context pointer from the wrong master device.

A vulnerability has been identified in the Linux kernel related to the llbitmap_suspend_timeout() function. When a timeout occurs, this function fails to resurrect the percpu_ref, leading to its permanent blocking.

A vulnerability has been identified in the Linux kernel related to a potential use-after-free of BTF objects. The issue involves incorrect refcounting in the check_pseudo_btf_id() function, which may lead to calling __check_pseudo_btf_id() with a zero refcount.

A vulnerability has been identified in the Linux kernel related to use-after-free in the power_supply_changed() function. This issue occurs when the power_supply handle is freed before the interrupt handler is registered, leading to the function being called with a freed handle.

In the Linux kernel, a race condition was found in the Intel VT-d driver during PASID table entry replacement. Due to the 512-bit entry size, which hardware may read in smaller chunks, directly overwriting an active entry (with Present bit set) can lead to an inconsistent state, resulting in unpredictable behavior or spurious faults.

In the Linux kernel, the iommu/vt-d driver has a race window when tearing down a context entry, where hardware may fetch a torn entry with the Present bit still set, leading to unpredictable behavior or spurious faults.

A vulnerability has been identified in the Linux kernel that may lead to a NULL pointer dereference when reading inline data for compressed ztailpacking pclusters. This issue occurs when pclusters are added to I/O chains without prior validation.

A bitmap inconsistency issue was identified and resolved in the Linux kernel's ext4 filesystem, which occurred during stress tests with large page workloads. This issue was caused by a race condition between page migration and bitmap modification.

A vulnerability has been identified in the Linux kernel related to use-after-free in the power_supply_changed() function. This issue occurs when the power_supply handle is freed before the interrupt handler is registered, potentially leading to system crashes or memory corruption.

A vulnerability has been identified in the Linux kernel related to use-after-free in the power_supply_changed() function. This issue occurs when the power_supply handle is freed before the interrupt handler is registered, potentially leading to system crashes or memory corruption.

A vulnerability has been identified in the Linux kernel within the 'DeleteIndexEntryRoot' function that may lead to a heap buffer overflow. The issue arises from inadequate bounds checking when calculating the entry size, potentially resulting in out-of-bounds reads.