fas8700_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/fas8700_firmware/ Sun, 26 Feb 2023 06:32:12 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png fas8700_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/fas8700_firmware/ 32 32 CVE-2019-19813 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19813/ Sun, 26 Feb 2023 06:32:12 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19813/ In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.

The post CVE-2019-19813 appeared first on CVE Vulnerability.

]]> In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.

The post CVE-2019-19813 appeared first on CVE Vulnerability.

]]> CVE-2019-19318 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19318/ Sun, 26 Feb 2023 06:32:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19318/ In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,

The post CVE-2019-19318 appeared first on CVE Vulnerability.

]]> In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,

The post CVE-2019-19318 appeared first on CVE Vulnerability.

]]> CVE-2019-19050 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19050/ Sun, 26 Feb 2023 06:31:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19050/ A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.

The post CVE-2019-19050 appeared first on CVE Vulnerability.

]]> A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.

The post CVE-2019-19050 appeared first on CVE Vulnerability.

]]> CVE-2019-19069 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19069/ Sun, 26 Feb 2023 06:31:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19069/ A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering dma_get_sgtable() failures, aka CID-fc739a058d99.

The post CVE-2019-19069 appeared first on CVE Vulnerability.

]]> A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering dma_get_sgtable() failures, aka CID-fc739a058d99.

The post CVE-2019-19069 appeared first on CVE Vulnerability.

]]> CVE-2019-18805 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-18805/ Sun, 26 Feb 2023 06:31:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-18805/ An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.

The post CVE-2019-18805 appeared first on CVE Vulnerability.

]]> An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.

The post CVE-2019-18805 appeared first on CVE Vulnerability.

]]> CVE-2021-33060 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-33060/ Thu, 23 Feb 2023 14:09:55 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-33060/ Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

The post CVE-2021-33060 appeared first on CVE Vulnerability.

]]> Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

The post CVE-2021-33060 appeared first on CVE Vulnerability.

]]>