h615c_firmware Archives - CVE Vulnerability

CVE-2020-12769

Sun, 26 Feb 2023 06:36:42 +0000

An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.

The post CVE-2020-12769 appeared first on CVE Vulnerability.

CVE-2020-12653

Sun, 26 Feb 2023 06:36:39 +0000

An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.

The post CVE-2020-12653 appeared first on CVE Vulnerability.

CVE-2020-10690

Sun, 26 Feb 2023 06:35:55 +0000

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.

The post CVE-2020-10690 appeared first on CVE Vulnerability.

CVE-2021-40490

Thu, 23 Feb 2023 14:11:46 +0000

A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.

The post CVE-2021-40490 appeared first on CVE Vulnerability.

CVE-2021-22555

Thu, 23 Feb 2023 14:07:20 +0000

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

The post CVE-2021-22555 appeared first on CVE Vulnerability.