Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Helge Deller

#22112of 53,632
10.4Total CVSS
Vulnerabilities · 2
Medium
2
PT-2024-21479
5.5
2024-04-03
Linux · Linux Kernel · CVE-2024-26705
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue occurs when using hotplug and bringing up a 32-bit CPU. The kernel asks the firmware about the BTLB information to set up the static (block) TLB entries, requiring write access to the static `btlb info` struct. However, since it is marked ` ro after init`, the kernel segfaults with missing write permissions. The fix involves dropping the ` ro after init` annotation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.
PT-2008-6512
4.9
2008-12-09
Linux · Linux Kernel · CVE-2008-5395
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.28-rc7 **Description** The issue allows local users to cause a denial of service, resulting in a system crash. This occurs when attempting to unwind a stack that contains userspace addresses, specifically through vectors associated with the parisc show stack function in arch/parisc/kernel/traps.c. **Recommendations** For Linux kernel versions prior to 2.6.28-rc7, update to version 2.6.28-rc7 or later to resolve the issue.