All CVEs — page 299 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Linux kernel's SMB client fails to properly validate absolute symlink targets before applying NT path fixes, leading to buffer overflows and integer underflows when processing symlinks without a symlinkroot setting. This vulnerability can result in arbitrary code execution or data corruption.
The Linux kernel's NTFS filesystem driver has a race condition where runlist updates are not properly protected by locks, potentially allowing attackers to corrupt filesystem metadata and gain arbitrary code execution or data manipulation capabilities.
This vulnerability occurs in the Linux kernel's virtual WiFi implementation where the operational state transfer happens before device registration, leading to use-after-free conditions when registration fails. This can result in system instability or potential privilege escalation.
The Linux kernel's DSA driver for mxl862xx switches has a race condition where statistics polling continues after port teardown, leading to use-after-free errors when accessing freed port structures. This occurs because the stats poll is started before setup completion and not properly stopped during teardown.