CVE Vulnerability Catalog

A use-after-free vulnerability in the power_supply_changed() function has been fixed in the Linux kernel. The issue arose from improper ordering of allocation and registration of the power supply handle, leading to a race condition where the interrupt handler could be invoked with a freed handle.

A vulnerability has been identified in the Linux kernel related to accessing the regions array before setting the number of regions. This issue leads to an array index out-of-bounds error.

A vulnerability has been identified in the Linux kernel related to improper removal of PASID entries in the Intel VT-d table. During the teardown of an entry, there is a risk that hardware may read an inconsistent value, leading to unpredictable system behavior.

In the Linux kernel, a vulnerability was found in the AppArmor module that may cause improper memory access when creating tables from unaligned data originating from userspace. The patch optimizes the copying process by avoiding unaligned memory accesses, fixing a potential bug.

In the Linux kernel's hns3 network driver, a double-free vulnerability exists for the tx spare buffer. The issue occurs because the tx_spare pointer in the original ring structure is incorrectly left pointing to old backup memory after a temporary copy is created. When memory allocation fails during ring initialization, the error path erroneously frees the same buffer twice.

A vulnerability has been identified in the Linux kernel related to use-after-free in the power_supply_changed() function. This issue occurs when the power_supply handle is freed before the interrupt handler is registered, potentially leading to system crashes or memory corruption.

A vulnerability has been identified in the Linux kernel related to use-after-free in the power_supply_changed() function. This issue occurs when the power_supply handle is freed before the interrupt handler is registered, potentially leading to system crashes or memory corruption.

A vulnerability has been identified in the Linux kernel related to use-after-free in the power_supply_changed() function. This issue occurs when the interrupt handler is registered before the power_supply handle is registered, leading to the function being called with a freed handle.

A vulnerability has been identified in the Linux kernel related to improper bounds checking of watch_id in address debugging. Passing a large watch_id from userspace can lead to buffer overflow errors and invalid memory access.

A vulnerability has been identified in the Linux kernel related to use-after-free in the `power_supply_changed()` function. The issue occurs when the interrupt handler is registered before the `power_supply` handle is registered, leading to a race condition where an interrupt can call the function with a freed handle.

A use-after-free vulnerability has been identified in the Linux kernel within the caif_serial ldisc_close() function. The issue arises when handle_tx() accesses ser->tty after it has been freed, leading to a dangling pointer.

A vulnerability in the Linux kernel related to the PASID table has been resolved, which could be used incorrectly by IOMMU hardware. The issue was due to the improper order of flushing the cache before writing the address of a newly allocated PASID table.

A vulnerability was identified in the Linux kernel within the gfs2 filesystem, leading to a use-after-free error due to improper management of quota data objects. This issue occurred during filesystem shutdown when quota objects were removed from the LRU list but not correctly removed from it.

A vulnerability in the Linux kernel's netfilter module has been resolved regarding the connection clean-up limit. Fixes have been implemented to increase the clean-up limit to 64 connections and optimize the process of collecting unused connections.

A vulnerability in the Linux kernel has been resolved in netfilter, which caused packets to be dropped instead of queued when an application did not set the 'F_GSO' flag and received a GSO packet with an unconfirmed nf_conn entry.

A vulnerability has been identified in the Linux kernel in the ib_uverbs_post_send() function, which does not validate the wqe_size value before use. This allows reading beyond the allocated buffer, potentially leaking sensitive kernel information.

A vulnerability has been identified in the Linux kernel in the amdgpu_gmc_get_nps_memranges() function, which uses kfree() to free memory allocated by vmalloc(). This may lead to memory corruption.

In the Linux kernel, a double free vulnerability was found in the RDMA/rxe driver's rxe_srq_from_init function. The queue pointer 'q' is assigned to 'srq->rq.queue' before copying the SRQ number to user space, and if copy_to_user() fails, a second rxe_queue_cleanup() is triggered, causing a double free.

A vulnerability has been identified in the Linux kernel within the reserve_unaccepted() function, which incorrectly calculates the memory reservation size for the unaccepted memory table. This issue can lead to the table being overwritten or inaccessible, resulting in a kernel panic.

Usługa replikacji IBM Netezza Performance Server w wersjach 3.0.2.0 do 3.0.5.0 pozwala atakującemu z niskimi uprawnieniami na eskalację uprawnień do poziomu roota. Wykorzystując tę lukę, atakujący może wykonywać polecenia na poziomie roota, uzyskać dostęp do powłoki roota oraz zmienić hasło użytkownika root.