Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Danilo Krummrich

Researcher fromRed Hat
#21665of 53,639
11Total CVSS
Vulnerabilities · 2
Medium
2
PT-2024-30724
5.5
2024-07-22
Linux · Linux Kernel · CVE-2024-43867
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A refcount underflow issue has been resolved in the Linux kernel. The issue occurs when `nouveau bo ref()` is called on a `nouveau bo` without initializing it, leading to a refcount underflow. To fix this, the code now cleans up manually instead of calling `nouveau bo ref()` in the unwind path of `drm gem object init()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.
PT-2024-7896
5.5
2024-01-31
Linux · Linux Kernel · CVE-2024-26977
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a memory leak in the `pci iounmap()` function. The `#ifdef ARCH HAS GENERIC IOPORT MAP` guard accidentally also guards `iounmap()`, resulting in MMIO mappings being leaked. To fix this, the guard needs to be moved so that `iounmap()` is called for MMIO mappings. This could potentially allow an attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.