Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Genes Lists

#19996of 60,592
15.6Total CVSS
Vulnerabilities · 2
High
2
PT-2025-3655
2024-12-30
7.8
CVE-2024-57930
Linux
Linux Kernel
The issue concerns a common bug in the Linux kernel where a TRACE EVENT() TP fast assign() assigns an address of an allocated string to the ring buffer and then references it in TP printk(), which can be executed hours later when the string is free. To catch this bug, the function test event printk() runs on all events as they are registered to ensure there's no unwanted dereferencing. It calls process string() to handle cases in TP printk() format that have "%s". The function returns whether or not the string is safe but can have some false positives. For instance, in the xe bo move() function, the "%s" references into xe mem type to name[], an array of pointers that should be safe for the event to access.
PT-2025-8826
2024-12-19
7.8
CVE-2024-58004
Linux
Linux Kernel
A vulnerability in the Linux kernel has been resolved, related to the intel/ipu6 media component. The issue occurs when a CPU latency QOS request is not removed on error, leading to list corruption. This corruption can cause warnings and errors, including list add corruption and CPU warnings. The vulnerability is associated with the `cpu latency qos update request` function and the `pm qos update target` function. The estimated number of potentially affected devices worldwide is not available.