All CVEs — page 301 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Linux kernel's CIFS implementation contains a use-after-free vulnerability in the cifs_chan_skip_or_disable() function where it continues to reference freed memory after dropping channel references. This occurs when a secondary channel is disabled and can lead to arbitrary code execution or system instability.
A Linux kernel vulnerability occurs when a non-leader thread executes and its POSIX CPU timer cleanup happens incorrectly, leading to a dangling reference in the timer's rbtree node. This can cause memory corruption or incorrect timer behavior when the timer is later freed or reaped.
A race condition in the Linux kernel's POSIX CPU timer implementation allows for a use-after-free vulnerability when a timer is being deleted while it's queued for expiration. This flaw occurs because the system incorrectly uses a 'firing' boolean flag instead of checking if the timer is actually queued on the expiry list, leading to premature timer deallocation.
The Linux kernel's RDS over RDMA implementation contains a deadlock bug where a connection handler tries to destroy a connection while holding a lock that the shutdown work needs to complete, causing workqueues to stall permanently. This occurs when a peer negotiates an older protocol version than expected.
The Linux kernel has a race condition in the signal handling mechanism that occurs during exec() operations, where a freed memory structure is accessed after a timer signal is processed, potentially leading to arbitrary code execution or system instability.
The Linux kernel's SWIOTLB (Software I/O Translation Lookaside Buffer) has a bug where it incorrectly calculates memory addresses when handling highmem pages during DMA operations. This causes data to be written to the wrong memory page, potentially leading to data corruption or incorrect device behavior.
The Linux kernel's RDMA/ucma component has a race condition where concurrent multicast join operations can lead to improper cleanup of multicast entries, potentially causing use-after-free conditions and system instability. This occurs when one thread joins a multicast group while another leaves it, with the leave operation incorrectly freeing memory that the first thread still needs.
The Linux kernel's Open vSwitch implementation has a race condition where it may reallocate memory for confirmed connection tracking entries while other CPU cores are accessing them, potentially leading to data corruption or crashes. This affects systems using Open vSwitch for network virtualization.