Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Mikko Rapeli

Researcher fromLinaro
#20050of 60,452
15.6Total CVSS
Vulnerabilities · 2
High
2
PT-2024-8429
2024-03-25
7.8
CVE-2024-35813
Linux
Linux Kernel
The issue is related to the Linux kernel's mmc core component, where a negative index can be accessed with an array. This occurs because the iterator `i` is not checked to be greater than zero before assigning `prev idata = idatas[i - 1]`. The vulnerability may allow an attacker to cause a denial of service.
PT-2024-3853
2024-03-04
7.8
CVE-2024-35785
Linux
Linux Kernel
The issue is related to incorrect error handling in the optee module of the Linux kernel, specifically when registering devices on the TEE bus. This can lead to a kernel panic. The error path has a bug that causes the kernel to panic when it fails to register devices. The commit that introduced this bug is mentioned as 7269cba53d90 ("tee: optee: Fix supplicant based device enumeration").