#IXGBE.CONF MODPROBE DEBIAN BUSTER DRIVER#

If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). This flaw allows a local user to crash or potentially escalate their privileges on the system.Ī use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.

#IXGBE.CONF MODPROBE DEBIAN BUSTER DRIVER#

Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info).Īn out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's name_len is larger than the tag length.Īn issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts.Īn issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read.Īn issue was discovered in the Linux kernel before 6.3.8. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.Īn issue was discovered in the Linux kernel before 6.3.4.

ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.Īn issue was discovered in the Linux kernel before 6.3.4.

fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes, via pdu_size in ksmbd_conn_handler_loop, leading to an out-of-bounds read.Īn issue was discovered in the Linux kernel before 6.3.9. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read.Īn issue was discovered in the Linux kernel before 6.3.8. This flaw allows a local user with special privileges to impact a kernel information leak issue.Īn issue was discovered in the Linux kernel before 6.3.10. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.Ī use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.Ī use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. The usb_giveback_urb function has a logic loophole in its implementation. A flaw was found in the USB Host Controller Driver framework in the Linux kernel.

Ixgbe.conf modprobe debian buster