All CVEs — page 298 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Linux kernel's cfg80211 subsystem has a use-after-free vulnerability when handling WiFi scan requests during interface shutdown. When a scan is running and the network interface goes down, the system incorrectly frees the scan request while the driver may still be using it, leading to potential memory corruption.
This vulnerability in the Linux kernel's cfg80211 module allows a rogue AP to cause the removal of valid BSS entries, leading to potential disconnections and service disruptions.
The Linux kernel's PXA DMA engine has a double counting bug where hardware descriptors are counted twice, leading to incorrect memory management and potential data corruption. This occurs when the descriptor allocation function was changed from kzalloc to kzalloc_flex, which introduced a counter conflict that causes the system to allocate more memory than needed.
This vulnerability allows an attacker to perform an out-of-bounds write by manipulating the RDMA header copy process, potentially leading to kernel memory corruption or arbitrary code execution.
The Linux kernel's netfilter flowtable implementation has a reference counting issue where connection tracking (ct) structures are released too early, potentially leading to use-after-free conditions when accessing stale data from the flowtable datapath. This can result in arbitrary code execution or system instability.