security@openanolis.org
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS security@openanolis.org
03
assessed vulnerabilities (20)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-1390US | — | — | ||
The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as… | ||||
| CVE-2024-24856US | — | — | ||
The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a
successful allocation, but the subsequent code directly dereferences the
pointer that receives it, which ma… | ||||
| CVE-2024-24864US | medium4.7 | — | ||
A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic… | ||||
| CVE-2024-24861US | medium6.3 | — | ||
A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000_get_frequency() function. This can result in return value overflow issue, possibly lead… | ||||
| CVE-2024-24860US | medium5.3 | — | ||
A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading… | ||||
| CVE-2024-24859US | medium4.8 | — | ||
A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception issue, possibly leading… | ||||
| CVE-2024-24858US | medium5.3 | — | ||
A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcast abnormality issue,… | ||||
| CVE-2024-24857US | medium6.8 | — | ||
A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leadin… | ||||
| CVE-2024-24855US | medium4.7 | — | ||
A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading… | ||||
| CVE-2024-23196US | medium4.7 | — | ||
A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can result in a null pointer dereference issue, possibly leading… | ||||
| CVE-2024-22386US | medium4.7 | — | ||
A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer dereference issue, possibl… | ||||
| CVE-2024-21803US | high7.8 | — | ||
Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files… | ||||
| CVE-2024-23307US | high7.8 | — | ||
Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow. | ||||
| CVE-2024-22099US | medium5.5 | — | ||
NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with progr… | ||||
| CVE-2022-36402US | medium5.5 | — | ||
An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)… | ||||
| CVE-2022-40133US | medium5.5 | — | ||
A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dr… | ||||
| CVE-2022-38457US | medium5.5 | — | ||
A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/rend… | ||||
| CVE-2022-38096US | medium5.5 | — | ||
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (o… | ||||
| CVE-2022-36280US | medium5.5 | — | ||
An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/rend… | ||||
| CVE-2022-1678US | high7.5 | — | ||
An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote clients… | ||||