Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Baruch Siach

#21626of 53,632
11Total CVSS
Vulnerabilities · 2
Medium
2
PT-2024-9084
5.5
2024-05-24
Linux · Linux Kernel · CVE-2021-47527
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified) Description: The issue is related to a memory leak in the serial core of the Linux kernel. The problem occurs because the transmit buffer is not freed after it is closed, which can cause issues when the buffer is reopened. This can lead to indefinite waiting for the buffer to drain or the transmission of stale data. The buffer leak can also occur when a port is unbound. The port lock is held when clearing the buffer pointer due to a race condition. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
PT-2024-5784
5.5
2024-04-27
Linux · Linux Kernel · CVE-2024-35984
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the smbus component of the Linux kernel, where an error occurs when using the designware controller as a target only. This can lead to a denial of service. The problem arises because target-only modes break the assumption that one transfer function is always available. The fix involves always checking the pointer in the ` i2c transfer` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.