All CVEs — page 1072 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The Linux kernel's netfilter module contains a buffer overflow vulnerability in the tcp_sack() function where it assumes 4-byte alignment when reading TCP option streams, potentially leading to system crashes or denial of service.
This vulnerability allows for potential out-of-bounds memory access in the Btrfs file system, which could lead to data corruption or exploitation if an attacker can manipulate the tree-checker items.
This flaw involves an integer underflow in the RDMA/rtrs-srv process_read and process_write functions, allowing a malicious client to cause out-of-bounds memory access. It matters because it can lead to severe system instability or potential privilege escalation.
The flaw allows a new nvme-fc controller in the CONNECTING state to trigger a warning due to uninitialized tag sets, potentially leading to locking issues and workqueue errors.
An unauthenticated attacker can submit malformed SAML messages that cause authentik worker processes to crash and restart, leading to denial of service for legitimate users. This affects SAML identity providers and sources, with database-backed sessions persisting through restarts but continued attacks causing sustained service degradation.
The flaw allows unauthorized access to stored credentials via API serializers, posing a risk to sensitive information.
The flaw allows an account with delegated permissions to grant superuser status or assign roles, bypassing necessary authorization checks, leading to unauthorized administrative access.
The flaw allows an attacker to substitute an email address during the enrollment process, potentially gaining access to the user's account.
The Linux kernel's stmmac network driver incorrectly enables a redundant RX Buffer Unavailable (RBUE) interrupt that causes a storm of MAC interrupts under heavy RX load, leading to system performance degradation or stall. This happens because RBUE fires continuously when the DMA runs out of RX descriptors, while the normal RX completion interrupt already handles ring refill through NAPI.