Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-27776 State: PUBLISHED Published: 2020-12-04T00:00:00 Last Updated: 2024-08-04T16:25:42.919Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.co
k versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1898304 - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27777 State: PUBLISHED Published: 2020-12-15T16:57:45 Last Updated: 2024-08-04T16:25:42.438Z Vendors: n/a Products: kernel Problem Types: CWE-862 Description: A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1900844 - https://www.openwall.com/lists/oss-security/2020/10/09/1 - https://www.openwal
illa.redhat.com/show_bug.cgi?id=1900844 - https://www.openwall.com/lists/oss-security/2020/10/09/1 - https://www.openwall.com/lists/oss-security/2020/11/23/2 - https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?h=next&id=bd59380c5ba4147dcbaad3e582b55ccfd120b764
CVE ID: CVE-2020-27778 State: PUBLISHED Published: 2020-12-03T16:46:47 Last Updated: 2024-08-04T16:25:42.413Z Vendors: n/a Products: poppler Problem Types: CWE-824 Description: A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1900712 - https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html
CVE ID: CVE-2020-27779 State: PUBLISHED Published: 2021-03-03T16:40:24 Last Updated: 2024-08-04T16:25:42.468Z Vendors: n/a Products: grub2 Problem Types: CWE-285 Description: A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's memory layout. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1900698 - https
tional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1900698 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/ - https://security.gentoo.org/glsa/202104-05 - https://security.netapp.com/advisory/ntap-20220325-0001/
CVE ID: CVE-2020-27780 State: PUBLISHED Published: 2020-12-17T23:55:45 Last Updated: 2024-08-04T16:25:42.438Z Vendors: n/a Products: pam Problem Types: CWE-287 Description: A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1901094
CVE ID: CVE-2020-27781 State: PUBLISHED Published: 2020-12-18T00:00:00 Last Updated: 2024-08-04T16:25:43.251Z Vendors: n/a Products: Ceph Problem Types: CWE-522 Description: User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to an arbitrary cephx user, including existing users. The access key is retrieved via the interface drivers. Then, all users of the requesting OpenStack project can view the access key. This enables the attacker to target any resource that the user has access to. This can be done to even "admin" users, compromising the ceph admi
r to target any resource that the user has access to. This can be done to even "admin" users, compromising the ceph administrator. This flaw affects Ceph versions prior to 14.2.16, 15.x prior to 15.2.8, and 16.x prior to 16.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1900109 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJ7FFROL25FYRL6FMI33VRKOD74LINRP/ - https://security.gentoo.org/glsa/202105-39 - https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
CVE ID: CVE-2020-27782 State: PUBLISHED Published: 2021-02-23T18:35:52 Last Updated: 2024-08-04T16:25:42.926Z Vendors: n/a Products: Undertow Problem Types: CWE-400 Description: A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability. This affects Undertow 2.1.5.SP1, 2.0.33.SP2, and 2.2.3.SP1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1901304
CVE ID: CVE-2020-27783 State: PUBLISHED Published: 2020-12-03T16:39:41 Last Updated: 2024-08-04T16:25:42.427Z Vendors: n/a Products: python-lxml Problem Types: CWE-79 Description: A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1901633 - https://www.debian.org/security/2020/dsa-4810 - https://lists.debian.org/debian-lts-announce/2020/12/msg00028.html - https://lists.f
debian.org/security/2020/dsa-4810 - https://lists.debian.org/debian-lts-announce/2020/12/msg00028.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMHVKRUT22LVWNL3TB7HPSDHJT74Q3JK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JKG67GPGTV23KADT4D4GK4RMHSO4CIQL/ - https://www.oracle.com//security-alerts/cpujul2021.html - https://advisory.checkmarx.net/advisory/CX-2020-4286 - https://security.netapp.com/advisory/ntap-20210521-0003/
CVE ID: CVE-2020-27784 State: PUBLISHED Published: 2022-09-01T17:56:31 Last Updated: 2024-08-04T16:25:42.472Z Vendors: n/a Products: kernel Problem Types: CWE-201 Description: A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer_ioctl() printer_ioctl() tries to access of a printer_dev instance. However, use-after-free arises because it had been freed by gprinter_free(). Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e8d5f92b8d30bb4ade76494490c3c065e12411b1
CVE ID: CVE-2020-27785 State: REJECTED Published: 2021-02-19T20:07:33 Last Updated: 2021-02-19T20:07:33 Description: No description available.
CVE ID: CVE-2020-27786 State: PUBLISHED Published: 2020-12-11T04:05:29 Last Updated: 2024-08-04T16:25:43.903Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change and possibly allow for memory corruption or privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container:
ty is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c1f6e3c818dd734c30f6a7eeebf232ba2cf3181d - http://www.openwall.com/lists/oss-security/2020/12/03/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1900933 - https://security.netapp.com/advisory/ntap-20210122-0002/
CVE ID: CVE-2020-27787 State: PUBLISHED Published: 2022-08-18T18:34:49 Last Updated: 2024-08-04T16:25:42.439Z Vendors: n/a Products: upx Problem Types: CWE-119 Description: A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/333 - https://github.com/upx/upx/commit/e2f60adc95334f47e286838dac33160819c5d74d
CVE ID: CVE-2020-27788 State: PUBLISHED Published: 2022-08-18T19:05:00 Last Updated: 2024-08-04T16:25:42.939Z Vendors: n/a Products: upx Problem Types: CWE-125 Description: An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/332 - https://github.com/upx/upx/commit/1bb93d4fce9f1d764ba57bf5ac154af515b3fc83
CVE ID: CVE-2020-27789 State: REJECTED Published: 2022-08-18T19:24:23 Last Updated: 2022-08-18T19:24:23 Description: No description available.
CVE ID: CVE-2020-27790 State: PUBLISHED Published: 2022-08-18T18:57:21 Last Updated: 2024-08-04T16:25:42.456Z Vendors: n/a Products: upx Problem Types: CWE-369 Description: A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/331 - https://github.com/upx/upx/commit/eb90eab6325d009004ffb155e3e33f22d4d3ca26
CVE ID: CVE-2020-27791 State: REJECTED Published: 2022-08-18T19:26:01 Last Updated: 2022-08-18T19:26:01 Description: No description available.
CVE ID: CVE-2020-27792 State: PUBLISHED Published: 2022-08-19T22:46:08 Last Updated: 2025-11-20T14:54:35.350Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 9 Problem Types: CWE-119 Description: A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service. Additional Analyst Notes: - CVE Program Contai
fer overflow that could lead to memory corruption or a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:4362 - https://access.redhat.com/security/cve/CVE-2020-27792 - https://bugzilla.redhat.com/show_bug.cgi?id=2247179 - https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe9822afb36e8a0eafc2b7
CVE ID: CVE-2020-27793 State: PUBLISHED Published: 2022-08-19T22:43:00 Last Updated: 2024-08-04T16:25:42.389Z Vendors: n/a Products: radare2 Problem Types: CWE-193 Description: An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radareorg/radare2/issues/16304 - https://github.com/radareorg/radare2/commit/ced0223c7a1b3b5344af315715cd28fe7c0d9ebc
CVE ID: CVE-2020-27794 State: PUBLISHED Published: 2022-08-19T22:44:29 Last Updated: 2024-08-04T16:25:43.800Z Vendors: n/a Products: radare2 Problem Types: CWE-415 Description: A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radareorg/radare2/issues/16303 - https://github.com/radareorg/radare2/commit/cb8b683758edddae2d2f62e8e63a738c39f92683
CVE ID: CVE-2020-27795 State: PUBLISHED Published: 2022-08-19T22:36:00 Last Updated: 2024-08-04T16:25:43.777Z Vendors: n/a Products: radare2 Problem Types: CWE-908 Description: A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, core->offset, -1); returns null pointer for fcn causing segmentation fault later in ensure_fcn_range (fcn). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radareorg/radare2/issues/16215 - https://github.com/radareorg/radare2/pull/16230 - https://github.com/radare
/github.com/radareorg/radare2/issues/16215 - https://github.com/radareorg/radare2/pull/16230 - https://github.com/radareorg/radare2/commit/4d3811681a80f92a53e795f6a64c4b0fc2c8dd22
CVE ID: CVE-2020-27796 State: PUBLISHED Published: 2022-08-25T19:37:04 Last Updated: 2024-08-04T16:25:42.450Z Vendors: n/a Products: upx Problem Types: CWE-119 Description: A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/392
CVE ID: CVE-2020-27797 State: PUBLISHED Published: 2022-08-25T19:37:18 Last Updated: 2024-08-04T16:25:43.623Z Vendors: n/a Products: upx Problem Types: CWE-119 Description: An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/390
CVE ID: CVE-2020-27798 State: PUBLISHED Published: 2022-08-25T19:37:32 Last Updated: 2024-08-04T16:25:43.918Z Vendors: n/a Products: upx Problem Types: CWE-119 Description: An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/396
CVE ID: CVE-2020-27799 State: PUBLISHED Published: 2022-08-25T19:37:43 Last Updated: 2024-08-04T16:25:43.968Z Vendors: n/a Products: upx Problem Types: CWE-119 Description: A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/391
CVE ID: CVE-2020-27800 State: PUBLISHED Published: 2022-08-25T19:37:54 Last Updated: 2024-08-04T16:25:43.759Z Vendors: n/a Products: upx Problem Types: CWE-119 Description: A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/395
CVE ID: CVE-2020-27801 State: PUBLISHED Published: 2022-08-25T19:38:10 Last Updated: 2024-08-04T16:25:42.453Z Vendors: n/a Products: upx Problem Types: CWE-119 Description: A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/394
CVE ID: CVE-2020-27802 State: PUBLISHED Published: 2022-08-25T19:38:23 Last Updated: 2024-08-04T16:25:42.421Z Vendors: n/a Products: upx Problem Types: CWE-119 Description: An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/393
CVE ID: CVE-2020-27813 State: PUBLISHED Published: 2020-12-02T00:00:00 Last Updated: 2024-08-04T16:25:44.139Z Vendors: n/a Products: golang-github-gorilla-websocket Problem Types: CWE-190 Description: An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1902111 - https://github.com/gorilla/websocket/security/advisories/GHSA-jf24-p9p9-4rjh - https://lists.debian.org/debian-lts-announce/2021/01/msg00008.html -
ebsocket/security/advisories/GHSA-jf24-p9p9-4rjh - https://lists.debian.org/debian-lts-announce/2021/01/msg00008.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00012.html
CVE ID: CVE-2020-27814 State: PUBLISHED Published: 2021-01-25T18:38:36 Last Updated: 2024-08-04T16:25:43.722Z Vendors: n/a Products: openjpeg Problem Types: CWE-122 Description: A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1901998 - https://github.com/uclouvain/openjpeg/issues/1283 - https://security.gentoo.org/glsa/202101-29 - https://lists.debian.org/debian-lts-announce/2021/02/ms
njpeg/issues/1283 - https://security.gentoo.org/glsa/202101-29 - https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html - https://www.debian.org/security/2021/dsa-4882 - https://www.oracle.com//security-alerts/cpujul2021.html
CVE ID: CVE-2020-27815 State: PUBLISHED Published: 2021-05-26T12:18:11 Last Updated: 2024-08-04T16:25:43.353Z Vendors: n/a Products: Linux Kernel Problem Types: CWE-119 Description: A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2020/11/30/5 - http://www.openwall.com/lists/oss-security/2020/12/28/1 - https://www.debia
enwall.com/lists/oss-security/2020/11/30/5 - http://www.openwall.com/lists/oss-security/2020/12/28/1 - https://www.debian.org/security/2021/dsa-4843 - https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html - https://bugzilla.redhat.com/show_bug.cgi?id=1897668%2C - https://www.openwall.com/lists/oss-security/2020/11/30/5%2C - https://www.openwall.com/lists/oss-security/2020/12/28/1%2C - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c61b3e4839007668360ed8b87d7da96d2e59fc6c - https://security.netapp.com/advisory/ntap-20210702-0004/
CVE ID: CVE-2020-27816 State: PUBLISHED Published: 2020-12-02T00:54:03 Last Updated: 2024-08-04T16:25:43.531Z Vendors: n/a Products: openshift-logging/console Problem Types: CWE-601 Description: The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana console) to different one, created based on the new CR for the new kibana resource. This could lead to an arbitrary URL redirection or the openshift-logging console link damage. This flaw affects elasticsearch-operator-container versions before 4.7. Additional Analyst Notes: - CVE Program Container: References
ects elasticsearch-operator-container versions before 4.7. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1902698
CVE ID: CVE-2020-27817 State: REJECTED Published: 2021-03-08T15:03:36 Last Updated: 2021-03-08T15:03:36 Description: No description available.
CVE ID: CVE-2020-27818 State: PUBLISHED Published: 2020-12-08T00:04:55 Last Updated: 2024-08-04T16:25:43.451Z Vendors: n/a Products: pngcheck Problem Types: CWE-120 Description: A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability. Additional Analyst Notes: - CVE Program Container: References: - https://bodhi.fedoraproject.org/updates/FEDORA-2020-04d5e1ce26 - https://bodhi.fedoraproject.org/updates/FEDORA-2020-4349e95c4f - https://bodhi.fedoraproject.org/updates/FEDORA-2020-23432b7b72 - https://bodhi.fedoraproject.org
EDORA-2020-4349e95c4f - https://bodhi.fedoraproject.org/updates/FEDORA-2020-23432b7b72 - https://bodhi.fedoraproject.org/updates/FEDORA-2020-27b168926a - https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6c93c61069 - https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-339db397ad - https://bugzilla.redhat.com/show_bug.cgi?id=1902011 - https://lists.debian.org/debian-lts-announce/2022/05/msg00043.html
CVE ID: CVE-2020-27819 State: PUBLISHED Published: 2021-02-23T03:40:01 Last Updated: 2024-08-04T16:25:42.389Z Vendors: n/a Products: libxls Problem Types: CWE-476 Description: An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It could allow a remote attacker to cause a denial of service via crafted XLS file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1903296
CVE ID: CVE-2020-27820 State: PUBLISHED Published: 2021-11-02T23:26:20 Last Updated: 2024-08-04T16:25:43.062Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if "unbind" the driver). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1901726 - https://lore.kernel.org/dri-devel/20201103194912.184413-2-jcline%40redhat.com/ - https://lore.kernel.org/dri-devel/20201103194912.184413-3-jcline%40redhat.com/
03194912.184413-2-jcline%40redhat.com/ - https://lore.kernel.org/dri-devel/20201103194912.184413-3-jcline%40redhat.com/ - https://lore.kernel.org/dri-devel/20201103194912.184413-4-jcline%40redhat.com/ - https://www.oracle.com/security-alerts/cpujul2022.html