All CVEs — page 655 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
The flaw allows an attacker to trigger an uninitialized memory access during the migration of virtual memory ranges, potentially leading to a denial of service or other vulnerabilities.
This vulnerability arises from an integer overflow in the framebuffer size calculation, which can lead to undefined behavior when both linebytes and height are large values.
The flaw involves improper handling of higher-order folio allocations in the Linux kernel, leading to potential memory corruption and use-after-free conditions.
This vulnerability in the Linux kernel's Nouveau driver allows for potential memory leaks when handling large folios, which could be exploited to gain unauthorized access or cause system instability.
This vulnerability in the Linux kernel's Nouveau driver allows an attacker to cause a use-after-free condition by delivering a kill event during the channel teardown process, potentially leading to a denial of service or other kernel crashes.
The vulnerability allows for a use-after-free condition in the Nouveau DRM driver, which can lead to a use-after-free error if another job owns the same region.
This vulnerability allows an attacker to disable preemption in the bpf_get_stackid function, potentially leading to a high-impact exploit.
The flaw allows incorrect slot reset on s390 systems, potentially leading to memory leaks and misbehavior of PCI functions.
The flaw allows an unauthenticated actor to trigger sensitive HA peer functions, potentially leading to elevated command execution on Edge units with HA enabled.
This vulnerability allows a userspace daemon to mmap a read-only ublk command buffer and then upgrade it to writable, enabling corruption of kernel-written fields. This can lead to privilege escalation or data corruption.
The flaw allows a user with permission to edit Airflow connections to execute arbitrary code in the scheduler process, which is outside the typical scope of their privileges.
The Authentik OAuth path in Apache Airflow FAB provider does not validate the issuer or audience claims of the id_token, allowing attackers to authenticate as a different user using a valid token from another application.