Latest CVE Feed
-
5.5
MEDIUMCVE-2023-52569
In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUG() after failure to insert delayed dir index item Instead of calling BUG() when we fail to insert a delayed dir index item into the delayed node's tree, we can just rel... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Jun. 19, 2025
-
5.5
MEDIUMCVE-2023-52562
In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() After the commit in Fixes:, if a module that created a slab cache does not release all of its allocated object... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Jan. 16, 2025
-
5.5
MEDIUMCVE-2023-52567
In the Linux kernel, the following vulnerability has been resolved: serial: 8250_port: Check IRQ data before use In case the leaf driver wants to use IRQ polling (irq = 0) and IIR register shows that an interrupt happened in the 8250 hardware the IRQ da... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2023-52573
In the Linux kernel, the following vulnerability has been resolved: net: rds: Fix possible NULL-pointer dereference In rds_rdma_cm_event_handler_cmn() check, if conn pointer exists before dereferencing it as rdma_set_service_type() argument Found by Li... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2023-52595
In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: restart beacon queue when hardware reset When a hardware reset is triggered, all registers are reset, so all queues are forced to stop in hardware interface. However, mac8... Read more
Affected Products : linux_kernel- Published: Mar. 06, 2024
- Modified: Dec. 12, 2024
-
5.5
MEDIUMCVE-2023-52576
In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code calling ima_free_kexec_buffer() runs long after the memblock allocator has already been torn down, pot... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Apr. 08, 2025
-
5.5
MEDIUMCVE-2023-52566
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() In nilfs_gccache_submit_read_data(), brelse(bh) is called to drop the reference count of bh when the call to nil... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Apr. 08, 2025
-
5.5
MEDIUMCVE-2020-25667
TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:format=\"image/dng\"` within `profile` due to improper string handling, when a crafted input file is provided to ImageMagick. The patch us... Read more
Affected Products : imagemagick- Published: Dec. 08, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-52611
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: sdio: Honor the host max_req_size in the RX path Lukas reports skb_over_panic errors on his Banana Pi BPI-CM4 which comes with an Amlogic A311D (G12B) SoC and a RTL8822CS S... Read more
Affected Products : linux_kernel- Published: Mar. 18, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-52527
In the Linux kernel, the following vulnerability has been resolved: ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() Including the transhdrlen in length is a problem when the packet is partially filled (e.g. something like send(MSG_MORE... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Jan. 13, 2025
-
5.5
MEDIUMCVE-2020-23904
A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program.... Read more
Affected Products : speex- Published: Nov. 10, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-52526
In the Linux kernel, the following vulnerability has been resolved: erofs: fix memory leak of LZMA global compressed deduplication When stressing microLZMA EROFS images with the new global compressed deduplication feature enabled (`-Ededupe`), I found s... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2023-52528
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the following uninit-value access issue: ===================================================== BUG: K... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2020-21675
A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.... Read more
- Published: Aug. 10, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-21532
fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.... Read more
- Published: Sep. 16, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-52522
In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleti... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-52523
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets With a SOCKMAP/SOCKHASH map and an sk_msg program user can steer messages sent from one TCP socket (s1) to actually egres... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Jan. 13, 2025
-
5.5
MEDIUMCVE-2023-52577
In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccp_v4_err()/dccp_v6_err() again dh->dccph_x is the 9th byte (offset 8) in "struct dccp_hdr", not in the "byte 7" as Jann claimed. We need to make sure the ICMP messages are... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2023-52506
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Set all reserved memblocks on Node#0 at initialization After commit 61167ad5fecdea ("mm: pass nid to reserve_bootmem_region()") we get a panic if DEFERRED_STRUCT_PAGE_INIT is... Read more
Affected Products : linux_kernel- Published: Mar. 02, 2024
- Modified: Jan. 13, 2025
-
5.5
MEDIUMCVE-2023-52606
In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validate size for vector operations Some of the fp/vmx code in sstep.c assume a certain maximum size for the instructions being emulated. The size of those operations howev... Read more
Affected Products : linux_kernel- Published: Mar. 06, 2024
- Modified: Feb. 14, 2025